MKdocs 1.2.2 - Directory Traversal

The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability see references because the dev server must be used in an unsafe way namely public to have this...

CVE-2026-1414

CVE-2026-1414 affects Sangfor Operation and Maintenance Security Management System (up to version 3.0.12). The vulnerability resides in the HTTP POST Request Handler for /equipment/get_Information, where tampering with the fortEquipmentIp argument can trigger a command injection. The issue can be...

MiracleLinux 7 : rh-nodejs14-nodejs-nodemon-2.0.3-2.el7, rh-nodejs14-nodejs-14.17.2-1.el7 (AXSA:2021-2260:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2260:01 advisory. nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl CVE-2021-23362 nodejs-ssri: Regular expression DoS ReDoS...

CVE-2023-25695

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2...

CVE-2022-37382

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Shenzhou Vision Han Technology Co., Ltd (CNVD-C-2025-925280)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

PT-2025-47520

Name of the Vulnerable Software and Affected Versions IBM i versions 7.2 through 7.6 Description A flaw exists in the database plan cache implementation that could allow a user with database access to view information they are not authorized to see. Recommendations IBM i versions 7.2 through 7.6...

EUVD-2019-15760

Malware in sbrugna...

EUVD-2014-5463

Malware in sbrugna...

EUVD-2021-21683

Malware in sbrugna...

EUVD-2019-2122

Malware in sbrugna...

EUVD-2018-18813

Malware in sbrugna...

EUVD-2017-17891

Malware in sbrugna...

EUVD-2013-2282

Malware in sbrugna...

EUVD-2020-30064

Malware in sbrugna...

EUVD-2020-27795

Malware in sbrugna...

EUVD-2018-15624

Malware in sbrugna...

EUVD-2016-4827

Malware in sbrugna...

EUVD-2021-25352

Malware in sbrugna...

EUVD-2020-20163

Malware in sbrugna...