CVE-2025-27020

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0...

CVE-2025-9223

ZOHO ManageEngine Applications Manager, affected through CVE-2025-9223, versions 178100 and below, is vulnerable to an authenticated command injection due to misconfiguration in the Execute Program/execute program action feature. The vulnerability allows total command execution with HIGH impact (...

ConnectWise Automate Agent 安全漏洞

ConnectWise Automate Agent is a remote monitoring and management software from ConnectWise USA. A security vulnerability exists in ConnectWise Automate Agent that stems from an improper configuration that allows the use of the HTTP protocol, which could lead to a man-in-the-middle attacker...

EUVD-2007-5713

Malware in sbrugna...

EUVD-2005-4169

Malware in sbrugna...

EUVD-2021-12295

Malware in sbrugna...

EUVD-2013-4757

Malware in sbrugna...

EUVD-2018-3903

Malware in sbrugna...

EUVD-2020-1731

Malware in sbrugna...

EUVD-2018-3904

Malware in sbrugna...

EUVD-2019-14882

Malware in sbrugna...

EUVD-2021-17277

Malware in sbrugna...

EUVD-2018-3905

Malware in sbrugna...

EUVD-2021-17276

Malware in sbrugna...

EUVD-2025-27956

Malicious code in bioql PyPI...

EUVD-2022-24985

Malicious code in bioql PyPI...

EUVD-2022-37286

Malicious code in bioql PyPI...

EUVD-2024-52145

Malicious code in bioql PyPI...

@musistudio/claude-code-router has improper CORS configuration

Impact Due to improper Cross-Origin Resource Sharing CORS configuration, there is a risk that user API Keys or equivalent credentials may be exposed to untrusted domains. Attackers could exploit this misconfiguration to steal credentials, abuse accounts, exhaust quotas, or access sensitive data...

GHSA-8HMM-4CRW-VM2C @musistudio/claude-code-router has improper CORS configuration

Impact Due to improper Cross-Origin Resource Sharing CORS configuration, there is a risk that user API Keys or equivalent credentials may be exposed to untrusted domains. Attackers could exploit this misconfiguration to steal credentials, abuse accounts, exhaust quotas, or access sensitive data...