EUVD-2007-5407

Malware in sbrugna...

EUVD-2018-9656

Malware in sbrugna...

PT-2025-40871

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The credentials of users stored in the system’s local database can be used for login, potentially allowing an attacker to gain unauthorized access and compromis...

EUVD-2021-28848

Malicious code in bioql PyPI...

EUVD-2023-39917

Malicious code in bioql PyPI...

EUVD-2022-26425

Malicious code in bioql PyPI...

EUVD-2023-26721

Malicious code in bioql PyPI...

EUVD-2021-34029

Malicious code in bioql PyPI...

EUVD-2025-22396

Malicious code in bioql PyPI...

EUVD-2025-20356

Malicious code in bioql PyPI...

EUVD-2022-38378

Malicious code in bioql PyPI...

EUVD-2021-30820

Malicious code in bioql PyPI...

EUVD-2021-9933

Malicious code in bioql PyPI...

EUVD-2022-4274

Malicious code in bioql PyPI...

CVE-2025-11155

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials...

SUSE CVE-2023-35928

Nextcloud Server is a space for data storage on Nextcloud, a self-hosted productivity playform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 19.0.0 until 19.0.13.9, 20.0.0 until 20.0.14.14, 21.0.0 until 21.0.9.12, 22.0.0 until...

CVE-2025-34188

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 macOS/Linux client deployments contain a vulnerability in the local logging mechanism. Authentication session tokens, including PHPSESSID, XSRF-TOKEN, and laravelsession, are...

CVE-2025-9628

The The integration of the AMO.CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the settingspage function. This makes it possible for unauthenticated attackers to modify critic...

The vulnerability of D-Link DIR-890L router’s microprogramming software, which stems from the use of rigidly encoded login credentials, allows a hacker to execute arbitrary code.

The vulnerability of D-Link DIR-890L router’s microprogramming software is related to the use of rigidly encoded login credentials. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

ROS-20250806-11

A vulnerability in the HTTP Requests library of the Python Requests programming language is related to insufficient protection of registration data. inadequate protection of login credentials. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to...