GFI KerioControl < 9.4.5 HTTP Response Splitting

GFI KerioControl version prior to 9.4.5 is affected by an HTTP Response Splitting vulnerability. Due to a not properly sanitized GET parameter used to generate a Location HTTP header in a 302 HTTP response an attacker can exploit this vulnerability to perform an Open Redirect or HTTP Response...

Rocket.Chat: Open Redirect in Rocket.Chat

An open redirect vulnerability was identified in Rocket.Chat. The /saml/sloRedirect/:provider endpoint included the redirect query string value directly in the Location header for a 302 redirect without any server-side validation. This issue was fixed in v8.4.0...

CVE-2025-60898

An unauthenticated server-side request forgery SSRF vulnerability in the Thumbnail via-uri endpoint of Halo CMS 2.21 allows a remote attacker to cause the server to issue HTTP requests to attacker-controlled URLs, including internal addresses. The endpoint performs a server-side GET to a...

EUVD-2004-0455

Malware in sbrugna...

EUVD-2005-0524

Malware in sbrugna...

EUVD-2009-3002

Malware in sbrugna...

EUVD-2003-1328

Malware in sbrugna...

EUVD-2018-13132

Malware in sbrugna...

EUVD-2019-0026

Malware in sbrugna...

EUVD-2020-0390

Malware in sbrugna...

EUVD-2009-3001

Malware in sbrugna...

EUVD-2009-2999

Malware in sbrugna...

EUVD-2015-7808

Malware in sbrugna...

EUVD-2003-1410

Malware in sbrugna...

EUVD-2019-9419

Malware in sbrugna...

EUVD-2022-31496

Malicious code in bioql PyPI...

EUVD-2022-4833

Malicious code in bioql PyPI...

EUVD-2024-0201

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-1861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when parsing HTTP redirect in the response to an HTTP...

BIT-LIBPYTHON-2022-45061

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often...