PT-2026-7190

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

Tanium end-user-cx 安全漏洞

Tanium end-user-cx is a terminal tool extension provided by the American company Tanium. There is a security vulnerability in Tanium end-user-cx, which stems from the ability to delete arbitrary files...

CVE-2025-13845

CVE-2025-13845 affects Schneider Electric EcoStruxure Power Build Rapsody. The Red Hat/NVD entries and Schneider Electric communications describe a CWE-416 Use After Free vulnerability (also noted as a Double Free in some sources) that could allow remote code execution when an end user imports a ...

CVE-2026-22646

Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information like file paths, database errors, or software versions that can be used to map the application's internal structu...

EUVD-2025-205605

Meshtastic is an open source mesh networking solution. The Meshtastic firmware starting from version 2.5 introduces asymmetric encryption PKI for direct messages, but when the pkiencrypted flag is missing, the firmware silently falls back to legacy AES-256-CTR channel encryption. This was an...

Qodo Gen 安全漏洞

Qodo Gen is a code AI aid from Qodo, Inc. in the United States. A security vulnerability exists in Qodo Gen that stems from vulnerability to a path traversal attack that could result in reading arbitrary local files on an end-user's system...

Microsoft Windows DirectX 代码问题漏洞

Microsoft Windows DirectX is a DirectX end-user runtime Web installer from Microsoft Corporation USA. A code issue vulnerability exists in Microsoft Windows DirectX, which can be exploited by an attacker to cause a denial of service on a system...

EUVD-2014-6366

Malware in sbrugna...

EUVD-2013-5734

Malware in sbrugna...

EUVD-2014-0429

Malware in sbrugna...

EUVD-2014-2159

Malware in sbrugna...

EUVD-2013-5634

Malware in sbrugna...

EUVD-2017-14059

Malware in sbrugna...

EUVD-2018-9527

Malware in sbrugna...

EUVD-2014-6436

Malware in sbrugna...

EUVD-2025-12456

Malicious code in bioql PyPI...

EUVD-2024-42275

Malicious code in bioql PyPI...

EUVD-2023-59876

Malicious code in bioql PyPI...

EUVD-2023-58235

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

Overview DotNetNuke.Core is a references provider to the DotNetNuke.dll to develop extensions for the DNN Platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Biography field. An attacker can execute arbitrary JavaScript code in the context of the website...