EUVD-2017-4190

Malware in sbrugna...

EUVD-2017-2798

Malware in sbrugna...

EUVD-2021-10011

Malware in sbrugna...

EUVD-2018-6316

Malware in sbrugna...

EUVD-2017-16856

Malware in sbrugna...

EUVD-2014-8146

Malware in sbrugna...

EUVD-2006-7107

Malware in sbrugna...

EUVD-2009-2370

Malware in sbrugna...

EUVD-2013-0719

Malware in sbrugna...

EUVD-2013-6682

Malware in sbrugna...

EUVD-2014-3831

Malware in sbrugna...

EUVD-2014-5004

Malware in sbrugna...

EUVD-2022-4371

Malicious code in bioql PyPI...

EUVD-2022-1995

Malicious code in bioql PyPI...

CVE-2025-54783

CVE-2025-54783 affects SuiteCRM up to version 7.14.6, with a reflected XSS vulnerability triggered by modifying the HTTP Referer header to inject JavaScript. The server may block the domain but still execute the injected script. Remediation is to upgrade to SuiteCRM 7.14.7 or later. No exploitati...

CVE-2022-25196

Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameters when the authentication process starts, allowing attackers with access to Jenkins to craft a URL that will redirect users to an attacker-specified URL after logging in...

CVE-2020-25786

webinc/js/info.php on D-Link DIR-816L 2.06.B09BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding except in Internet...

CVE-2014-8301

Cross-site scripting XSS vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header...

CVE-2019-6726

The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wppostratingsclearfastestcache and rmfolderrecursively in wpFastestCache.php mishandle ../ in an HTTP Referer header...

CVE-2014-8305

Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header to 1 index.php, 2 cart.php, 3 msg.php, or 4 page.php...