478 matches found
CVE-2025-66458
CVE-2025-66458 – Lookyloo is affected in versions prior to 1.35.3. The issue stems from unsafe use of f-strings in Markup, enabling multiple XSS when a malicious third-party server responds with a JSON document containing JavaScript in a script element. The vulnerability is fixed in 1.35.3. Remed...
CVE-2025-59789 Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser
Uncontrolled recursion in the json2pb component in Apache bRPC version 1.15.0 on all platforms allows remote attackers to make the server crash via sending deep recursive json data. Root Cause: The bRPC json2pb component uses rapidjson to parse json data from the network. The rapidjson parser use...
CVE-2022-4985 Vodafone H500s WiFi Password Disclosure via activation.json
Vodafone H500s devices running firmware v3.5.10 hardware model Sercomm VFH500 expose the WiFi access point password via an unauthenticated HTTP endpoint. By sending a crafted GET request to /data/activation.json with specific headers and cookies, a remote attacker can retrieve a JSON document tha...
CVE-2024-58274
Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...
EUVD-2012-3832
Malware in sbrugna...
EUVD-2010-1306
Malware in sbrugna...
EUVD-2019-7389
Malware in sbrugna...
EUVD-2020-30282
Malware in sbrugna...
EUVD-2007-2377
Malware in sbrugna...
EUVD-2018-10354
Malware in sbrugna...
EUVD-2018-8798
Malware in sbrugna...
EUVD-2018-8794
Malware in sbrugna...
EUVD-2018-8793
Malware in sbrugna...
EUVD-2019-3162
Malware in sbrugna...
EUVD-2017-6420
Malware in sbrugna...
EUVD-2007-2378
Malware in sbrugna...
EUVD-2019-5937
Malware in sbrugna...
EUVD-2018-8799
Malware in sbrugna...