EUVD-2019-7493

Malware in sbrugna...

DEBIAN-CVE-2025-59734

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...

EUVD-2025-29560

Malicious code in bioql PyPI...

EUVD-2024-54662

Malicious code in bioql PyPI...

EUVD-2023-50050

Malicious code in bioql PyPI...

EUVD-2025-1819

Malicious code in bioql PyPI...

EUVD-2024-25120

Malicious code in bioql PyPI...

EUVD-2022-49954

Malicious code in bioql PyPI...

EUVD-2024-44949

Malicious code in bioql PyPI...

WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Addison versions 1.4.8...

WordPress Clanora theme < 1.3.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Clanora versions 1.3.1...

CVE-2025-8194 affecting package python3 for versions less than 3.12.9-4

CVE-2025-8194 affecting package python3 for versions less than 3.12.9-4. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2017-6820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rcubeutils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability via a crafted Cascading Style Sheets CSS...

CVE-2025-8041 Incorrect URL truncation in Firefox for Android

In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability was fixed in Firefox 141...

CVE-2025-51510

The MoonShine open-source admin panel (specifically version v3.12.5 ) is vulnerable to SQL injection due to the improper handling of the data parameter. This vulnerability exists within the Blog module (specifically the Categories page) when utilizing the moonshine-tree-resource component. An att...

CVE-2025-38346 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38346 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

CVE-2025-54445: Improper Restriction of XML External Entity Reference

Improper Restriction of XML External Entity Reference vulnerability in Samsung Electronics MagicINFO 9 Server allows Server Side Request Forgery.This issue affects MagicINFO 9 Server: less than 21.1080.0...

CVE-2025-54446: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Samsung Electronics MagicINFO 9 Server allows Upload a Web Shell to a Web Server.This issue affects MagicINFO 9 Server: less than 21.1080.0...

CVE-2025-54448: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0...

CVE-2025-54455: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0...