31708 matches found
EUVD-2018-1285
Malware in sbrugna...
EUVD-2020-2568
Malware in sbrugna...
EUVD-2020-27293
Malware in sbrugna...
EUVD-2021-20220
Malware in sbrugna...
CVE-2025-40888: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...
CVE-2025-40887: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...
CVE-2025-3719: Incorrect Authorization
An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/o...
PT-2025-40989
Name of the Vulnerable Software and Affected Versions Alert functionality affected versions not specified Description A SQL Injection issue exists due to inadequate input validation. An authenticated user with limited privileges can execute arbitrary SQL statements, potentially leading to...
CVE-2025-40886: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially exposing unauthorized data, altering...
CVE-2025-36355: Inclusion of Functionality from Untrusted Control Sphere
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere...
Lovable VDP: Users can change project visibility which requires high subscription by just changing request body
A Broken Access Control vulnerability was discovered that allowed users to change project visibility to higher subscription tiers by modifying the request body. The visibility was changed from the default setting to Personal or Workspace, bypassing subscription checks and enabling unauthorized...
EUVD-2025-25126
Malicious code in bioql PyPI...
EUVD-2025-25869
Malicious code in bioql PyPI...
EUVD-2025-26199
Malicious code in bioql PyPI...
EUVD-2025-26284
Malicious code in bioql PyPI...
EUVD-2025-26473
Malicious code in bioql PyPI...
EUVD-2023-26479
Malicious code in bioql PyPI...
EUVD-2023-59112
Malicious code in bioql PyPI...