CVE-2025-10041

The CVE-2025-10041 entry concerns the Flex QR Code Generator WordPress plugin. Affected versions include all up to and including 1.2.5, where missing file type validation in the save_qr_code_to_db() function allows unauthenticated arbitrary file uploads, potentially enabling remote code execution...

EUVD-2025-34561

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

Online Job Search Engine postjob.php File SQL Injection Vulnerability

Online Job Search Engine is an online job search engine. Online Job Search Engine suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter txtjobID in the file /postjob.php. An attacker can exploit this...

CVE-2025-6553

The Ovatheme Events Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the processcheckout function in all versions up to, and including, 1.8.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

FreeRTOS-Plus-TCP 安全漏洞

FreeRTOS-Plus-TCP is an extensible open source and thread-safe TCP/IP stack for FreeRTOS. A security vulnerability exists in FreeRTOS-Plus-TCP that stems from a lack of validation checks in the IPv6 packet processing code, which could lead to out-of-bounds reads...

EUVD-2025-32870

A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters. An authenticated user with limited privileges, by issuing a specifically-crafted request, can potentially alter the structure and content of files in the /data folder...

EUVD-2020-1670

Malware in sbrugna...

EUVD-2018-13231

Malware in sbrugna...

EUVD-2020-4938

Malware in sbrugna...

CVE-2025-9212

The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpdispatcherprocessupload function in all versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

EUVD-2025-30877

Malicious code in bioql PyPI...

EUVD-2025-28707

Malicious code in bioql PyPI...

EUVD-2024-19223

Malicious code in bioql PyPI...

EUVD-2025-17831

Malicious code in bioql PyPI...

EUVD-2024-33175

Malicious code in bioql PyPI...

EUVD-2025-29244

Malicious code in bioql PyPI...

EUVD-2021-9939

Malicious code in bioql PyPI...

EUVD-2025-31690

Malicious code in bioql PyPI...

EUVD-2022-1168

Malicious code in bioql PyPI...

EUVD-2025-22478

Malicious code in bioql PyPI...