EUVD-2021-1660

Malware in sbrugna...

EUVD-2018-18382

Malware in sbrugna...

EUVD-2018-2683

Malware in sbrugna...

EUVD-2020-29422

Malware in sbrugna...

EUVD-2019-8108

Malware in sbrugna...

EUVD-2019-9408

Malware in sbrugna...

EUVD-2004-2686

Malware in sbrugna...

EUVD-2012-4477

Malware in sbrugna...

EUVD-2022-4305

Malicious code in bioql PyPI...

EUVD-2024-0965

Malicious code in bioql PyPI...

EUVD-2025-27196

Malicious code in bioql PyPI...

EUVD-2024-0913

Malicious code in bioql PyPI...

EUVD-2025-28915

Malicious code in bioql PyPI...

EUVD-2025-26702

Malicious code in bioql PyPI...

org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability

A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration...

org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability

A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration...

org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability

A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration...

CVE-2025-56769

The chinabugotech hutool library (specifically cn.hutool and hutool-extra) is vulnerable to Remote Code Execution (RCE) due to improper expression handling in the QLExpressEngine class. Attackers can submit crafted expressions to trigger arbitrary method invocations. A Proof of Concept (PoC) demo...

CVE-2025-42944

Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting malicious payload to an open port. The deserialization of such untrusted Java objects could lead to arbitrary OS command execution, posing a high...

CVE-2025-42944

Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting malicious payload to an open port. The deserialization of such untrusted Java objects could lead to arbitrary OS command execution, posing a high...