EUVD-2018-1855

Malware in sbrugna...

EUVD-2017-1502

Malware in sbrugna...

EUVD-2019-3037

Malware in sbrugna...

EUVD-2017-1504

Malware in sbrugna...

EUVD-2018-1857

Malware in sbrugna...

EUVD-2018-1848

Malware in sbrugna...

EUVD-2023-43712

Malicious code in bioql PyPI...

EUVD-2022-50611

Malicious code in bioql PyPI...

EUVD-2023-43713

Malicious code in bioql PyPI...

CVE-2024-50344

I, Librarian is an open-source version of a PDF managing SaaS. Supplemental Files are allowed to be viewed in the browser, only if they have a white-listed MIME type. Unfortunately, this logic is broken, thus allowing unsafe files containing Javascript to be executed with the application context...

CVE-2024-40500

Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import component...

CVE-2023-3021

Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2023-3020

Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

CVE-2019-11359

Cross-site scripting XSS vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter...

CVE-2018-1000137

I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...

CVE-2018-1000138

I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...

CVE-2018-1000124

I Librarian I-librarian version 4.8 and earlier contains a XML External Entity XXE vulnerability in line 154 of importmetadata.phpsimplexmlloadstring that can result in an attacker reading the contents of a file and SSRF. This attack appear to be exploitable via posting xml in the Parameter...

CVE-2019-11449

I, Librarian 4.10 has XSS via the notes.php notes parameter...

CVE-2017-1000235

I, Librarian version =4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised...