97 matches found
EUVD-2019-13498
Malware in sbrugna...
EUVD-2016-1706
Malware in sbrugna...
EUVD-2023-49466
Malicious code in bioql PyPI...
EUVD-2023-36446
Malicious code in bioql PyPI...
EUVD-2023-32491
Malicious code in bioql PyPI...
EUVD-2022-41268
Malicious code in bioql PyPI...
EUVD-2024-28298
Malicious code in bioql PyPI...
EUVD-2024-53468
Malicious code in bioql PyPI...
EUVD-2022-28085
Malicious code in bioql PyPI...
EUVD-2024-54643
Malicious code in bioql PyPI...
EUVD-2022-6934
Malicious code in bioql PyPI...
EUVD-2021-6887
Malicious code in bioql PyPI...
CVE-2025-59768
Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter
Summary [email protected] is vulnerable to an Arbitrary temporary file / directory write via symbolic link dir parameter. Details According to the documentation there are some conditions that must be held: // https://github.com/raszi/node-tmp/blob/v0.2.3/README.md?plain=1L41-L50 Other breaking changes,...
Exploit for Incorrect Permission Assignment for Critical Resource in Facebook Below
CVE-2025-27591 description Basically below tool allow f...
Avast Cleanup Premium TuneupSvc Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Avast...
SAP NetWeaver AS ABAP Multiple Vulnerabilities
The remote SAP NetWeaver ABAP server may be affected by multiple vulnerabilies. - SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious lin...
GHSA-WJ44-9VCG-WJQ7 Gogs allows deletion of internal files which leads to remote command execution
Summary Due to the insufficient patch for the CVE-2024-39931, it's still possible to delete files under the .git directory and achieve remote command execution. Details In the patch for CVE-2024-39931, the following check is added:...
CVE-2024-36486
Parallels Desktop for Mac 20.1.1 (55740) has a privilege escalation flaw in the virtual machine archive restoration path. During unarchive, the root-privileged prl_vmarchiver decompresses data and writes it back to the original location; an attacker can exploit this by replacing archived data wit...
CVE-2024-38518
BigBlueButton is an open-source virtual classroom designed to help teachers teach and learners learn. An attacker with a valid join link to a meeting can trick BigBlueButton into generating a signed join link with additional parameters. One of those parameters may be "role=moderator", allowing an...