MKdocs 1.2.2 - Directory Traversal

The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability see references because the dev server must be used in an unsafe way namely public to have this...

CVE-2026-1414

CVE-2026-1414 affects Sangfor Operation and Maintenance Security Management System (up to version 3.0.12). The vulnerability resides in the HTTP POST Request Handler for /equipment/get_Information, where tampering with the fortEquipmentIp argument can trigger a command injection. The issue can be...

MiracleLinux 7 : rh-nodejs14-nodejs-nodemon-2.0.3-2.el7, rh-nodejs14-nodejs-14.17.2-1.el7 (AXSA:2021-2260:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2260:01 advisory. nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl CVE-2021-23362 nodejs-ssri: Regular expression DoS ReDoS...

CVE-2023-25695

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2...

CVE-2022-37382

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Shenzhou Vision Han Technology Co., Ltd (CNVD-C-2025-925280)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

PT-2025-47520

Name of the Vulnerable Software and Affected Versions IBM i versions 7.2 through 7.6 Description A flaw exists in the database plan cache implementation that could allow a user with database access to view information they are not authorized to see. Recommendations IBM i versions 7.2 through 7.6...

EUVD-2020-17711

Malware in sbrugna...

EUVD-2019-15760

Malware in sbrugna...

EUVD-2017-4115

Malware in sbrugna...

EUVD-2017-17892

Malware in sbrugna...

EUVD-2017-17890

Malware in sbrugna...

EUVD-2020-12168

Malware in sbrugna...

EUVD-2018-10682

Malware in sbrugna...

EUVD-2017-17891

Malware in sbrugna...

EUVD-2020-27795

Malware in sbrugna...

EUVD-2020-29918

Malware in sbrugna...

EUVD-2003-1550

Malware in sbrugna...

EUVD-2021-23586

Malware in sbrugna...

EUVD-2014-7563

Malware in sbrugna...