97 matches found
atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen
A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...
CVE-2026-8172
The Simple Basic Contact Form WordPress plugin (versions
CVE-2025-71212
A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...
The vulnerability of the user interface of the universal monitoring system Zabbix allows a intruder to execute arbitrary code.
The vulnerability of the user interface of the Zabbix monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the user opens a specially crafted link...
CVE-2026-21853
AFFiNE is an open-source, all-in-one workspace and an operating system. Prior to version 0.25.4, there is a one-click remote code execution vulnerability. This vulnerability can be exploited by embedding a specially crafted affine: URL on a website. An attacker can trigger the vulnerability in tw...
GO-2026-4447 OpenCloud Affected by Public Link Exploit in github.com/opencloud-eu/opencloud
OpenCloud Affected by Public Link Exploit in github.com/opencloud-eu/opencloud. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, plea...
GO-2026-4444 OpenCloud Reva has a Public Link Exploit in github.com/opencloud-eu/reva
OpenCloud Reva has a Public Link Exploit in github.com/opencloud-eu/reva...
OpenCloud Affected by Public Link Exploit
Impact A security issue was discovered in Reva that enables a malicious user to bypass the scope validation of a public link. That allows it to access resources outside the scope of a public link. OpenCloud uses Reva as one of its core components and thus it is affected. Patches Update to OpenClo...
GHSA-VF5J-R2HW-2HRW OpenCloud Affected by Public Link Exploit
Impact A security issue was discovered in Reva that enables a malicious user to bypass the scope validation of a public link. That allows it to access resources outside the scope of a public link. OpenCloud uses Reva as one of its core components and thus it is affected. Patches Update to OpenClo...
CVE-2025-65516
A stored cross-site scripting XSS vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the lin...
CVE-2024-45161
A Cross-Site Request Forgery (CSRF) vulnerability exists in the administrative web GUI of the Blu-Castle BCUM221E wireless router, specifically affecting version 1.0.0P220507 . An attacker can exploit this issue through methods such as a crafted URL , image loading , or XMLHttpRequest to cause da...
CVE-2025-60500
QDocs Smart School Management System 7.1 is vulnerable to a logic flaw in its media upload feature, specifically within the Download Center > Upload Share Content component. Authenticated users with roles such as accountant , admin , or superadmin can bypass file type restrictions by exploitin...
EUVD-2025-34193
An Improper Neutralization of Formula Elements in a CSV File vulnerability exists in System Diagnostics Manager SDM of B&R Automation Runtime versions before 6.4 enabling a remote attacker to inject formula data into a generated CSV file. The exploitation of this vulnerability requires the attack...
EUVD-2020-24861
Malware in sbrugna...
EUVD-2020-20857
Malware in sbrugna...
EUVD-2007-1789
Malware in sbrugna...
EUVD-1999-0713
Malware in sbrugna...
EUVD-2019-4878
Malware in sbrugna...