EUVD-2015-8831

Malware in sbrugna...

EUVD-2017-10695

Malware in sbrugna...

EUVD-2016-4001

Malware in sbrugna...

EUVD-2018-0109

Malware in sbrugna...

EUVD-2017-10242

Malware in sbrugna...

EUVD-2018-0033

Malware in sbrugna...

EUVD-2016-4044

Malware in sbrugna...

EUVD-2018-7555

Malware in sbrugna...

EUVD-2024-53370

Malicious code in bioql PyPI...

EUVD-2003-0020

Malicious code in bioql PyPI...

EUVD-2022-3685

Malicious code in bioql PyPI...

EUVD-2022-43257

Malicious code in bioql PyPI...

EUVD-2025-25835

Malicious code in bioql PyPI...

EUVD-2023-32129

Malicious code in bioql PyPI...

EUVD-2025-13048

Malicious code in bioql PyPI...

EUVD-2023-45339

Malicious code in bioql PyPI...

EUVD-2025-16612

Malicious code in bioql PyPI...

CVE-2025-10377 System Dashboard <= 2.8.20 - Cross-Site Request Forgery

The System Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.20. This is due to missing nonce validation on the sdtogglelogs function. This makes it possible for unauthenticated attackers to toggle critical logging settings...

PT-2025-39486

Name of the Vulnerable Software and Affected Versions System Dashboard plugin for WordPress versions prior to 2.8.21 Description The System Dashboard plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF. This is caused by a lack of nonce validation in the sd toggle logs function...

Information Disclosure

github.com/traptitech/traq is vulnerable to Information Disclosure. The vulnerability is due to sensitive information such as OAuth tokens being recorded in SQL error log files when a query fails, which allows an attacker with log access to intentionally trigger errors and acquire the exposed dat...