The vulnerability in the NagiosXI software’s /admin/coreconfigsnapshots.php script allows a attacker to compromise the confidentiality of protected information.

The vulnerability of NagiosXI software’s /admin/coreconfigsnapshots.php script is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of the protected information...

EUVD-2014-5442

Malware in sbrugna...

EUVD-2014-5475

Malware in sbrugna...

EUVD-2014-7483

Malware in sbrugna...

EUVD-2016-7123

Malware in sbrugna...

EUVD-2021-26130

Malware in sbrugna...

EUVD-2014-5723

Malware in sbrugna...

EUVD-2014-7497

Malware in sbrugna...

EUVD-2014-6850

Malware in sbrugna...

EUVD-2023-44743

Malicious code in bioql PyPI...

EUVD-2021-8209

Malicious code in bioql PyPI...

EUVD-2023-36800

Malicious code in bioql PyPI...

CVE-2025-51858

Self Cross-Site Scripting XSS vulnerability in ChatPlayground.ai through 2025-05-24, allows attackers to execute arbitrary code and gain sensitive information via a crafted SVG file contents sent through the chat component...

Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games

Thousands of personal records allegedly linked to athletes and visitors of the Saudi Games have been published online by a pro-Iranian hacktivist group called Cyber Fattah. Cybersecurity company Resecurity said the breach was announced on Telegram on June 22, 2025, in the form of SQL database...

CVE-2024-51399

Altai Technologies Ltd Altai IX500 Indoor 22 802.11ac Wave 2 AP After login, there are file reads in the background, and attackers can obtain sensitive information such as user credentials, system configuration, and database connection strings, which can lead to data breaches and identity theft...

CVE-2017-16900

Incorrect Access Control in Hunesion i-oneNet 3.0.6042.1200 allows the local user to access other user's information which is unauthorized via brute force...

CVE-2025-25323

An issue in Qianjin Network Information Technology Shanghai Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-51123

An issue in Zertificon Z1 SecureMail Z1 SecureMail Gateway 4.44.2-7240-debian12 allows a remote attacker to obtain sensitive information via the /compose-pdf.xhtml?convid=id component...

CVE-2024-34457 Apache StreamPark IDOR Vulnerability

On versions before 2.1.4, after a regular user successfully logs in, they can manually make a request using the authorization token to view everyone's user flink information, including executeSQL and config. Mitigation: all users should upgrade to 2.1.4...

CVE-2020-8889

The ShipStation.com plugin 1.0 for CS-Cart allows remote attackers to obtain sensitive information via action=export because a typo results in a successful comparison of a blank password and NULL...