306 matches found
CVE-2025-63561: Uncontrolled Resource Consumption
Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is susceptible to a Slowloris-style Denial-of-Service DoS condition in the HTTP connection handling layer, where an attacker that opens and maintains many slow or partially-completed HTTP connections can exhaust the server’s...
arkadiyt-projects: DNS Rebinding Attack
Hi, there is a DNS rebinding vulnerability in your SSRF filter. F4891755 You validate the hostname's IP address, but then pass the hostname to Net::HTTP.start, which does its own DNS lookup. An attacker can control a DNS server that returns a safe public IP during validation, then returns 127.0.0...
EUVD-2012-2425
Malware in sbrugna...
EUVD-2004-0264
Malware in sbrugna...
EUVD-2012-2426
Malware in sbrugna...
EUVD-2014-0137
Malware in sbrugna...
EUVD-2015-4659
Malware in sbrugna...
EUVD-2015-0211
Malware in sbrugna...
EUVD-2016-7978
Malware in sbrugna...
EUVD-2017-8193
Malware in sbrugna...
EUVD-2020-7752
Malware in sbrugna...
EUVD-2020-29657
Malware in sbrugna...
EUVD-2022-4825
Malicious code in bioql PyPI...
EUVD-2022-5810
Malicious code in bioql PyPI...
EUVD-2022-6447
Malicious code in bioql PyPI...
EUVD-2025-17428
Malicious code in bioql PyPI...
CVE-2025-35115: Download of Code Without Integrity Check
Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30...
CVE-2025-20268: Improper Handling of Values
A vulnerability in the Geolocation-Based Remote Access RA VPN feature of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured policies to allow or deny HTTP connections based on a country or region. This vulnerability exists becaus...
PT-2025-29820 · Digisol · Digisol Dg-Gr6821Ac Router
Name of the Vulnerable Software and Affected Versions: Digisol DG-GR6821AC Router affected versions not specified Description: The Digisol DG-GR6821AC Router is susceptible to a misconfiguration regarding the Secure and HttpOnly flags on session cookies associated with the router web interface. A...
CVE-2025-27450 CVE-2025-27450
The Secure attribute is missing on multiple cookies provided by the MEAC300-FNADE4. An attacker can trick a user to establish an unencrypted HTTP connection to the server and intercept the request containing the PHPSESSID cookie...