EUVD-2010-0782

Malware in sbrugna...

EUVD-2018-7086

Malware in sbrugna...

EUVD-2001-1522

Malware in sbrugna...

EUVD-2017-9242

Malware in sbrugna...

EUVD-2020-7882

Malware in sbrugna...

EUVD-2021-25058

Malware in sbrugna...

EUVD-2007-2711

Malware in sbrugna...

EUVD-2015-2041

Malware in sbrugna...

EUVD-2010-0248

Malware in sbrugna...

EUVD-2013-4473

Malware in sbrugna...

EUVD-2020-18250

Malware in sbrugna...

EUVD-2025-2672

Malicious code in bioql PyPI...

EUVD-2022-47720

Malicious code in bioql PyPI...

EUVD-2023-34489

Malicious code in bioql PyPI...

📄 iDempiere WebUI 12.0.0.202508171158 Session Fixation

iDempiere WebUI version 12.0.0.202508171158 suffers from a session fixation vulnerability. The application does not issue a new session identifier JSESSIONID after successful authentication. An attacker who can set or predict a victim’s session ID prior to login may hijack the victim’s...

Linux Distros Unpatched Vulnerability : CVE-2020-5421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks...

CVE-2023-30056

A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie...

CVE-2022-44788

An issue was discovered in Appalti & Contratti 9.12.2. It allows Session Fixation. When a user logs in providing a JSESSIONID cookie that is issued by the server at the first visit, the cookie value is not updated after a successful login...

CVE-2021-38618

In GFOS Workforce Management 4.8.272.1, the login page of application is prone to authentication bypass, allowing anyone who knows a user's credentials except the password to get access to an account. This occurs because of JSESSIONID mismanagement...

CVE-2025-22216 CVE-2025-22216 UAA Missing Zone Validation

A UAA configured with multiple identity zones, does not properly validate session information across those zones. A User authenticated against a corporate IDP can re-use their jsessionid to access other zones...