EUVD-2010-0353

Malware in sbrugna...

EUVD-2020-6228

Malware in sbrugna...

EUVD-2021-26360

Malware in sbrugna...

EUVD-2020-6229

Malware in sbrugna...

EUVD-2020-6227

Malware in sbrugna...

EUVD-1999-1075

Malware in sbrugna...

EUVD-2020-6231

Malware in sbrugna...

EUVD-2021-8768

Malicious code in bioql PyPI...

EUVD-2022-35154

Malicious code in bioql PyPI...

EUVD-2023-31024

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-11507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross site scripting XSS vulnerability exists in CheckMK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker t...

CVE-2025-58124 Lack of TLS validation in plugin check-mk-api on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin check-mk-api allows attackers in MitM position to intercept traffic...

Checkmk Exchange plugin check-mk-api 安全漏洞

Checkmk Exchange plugin check-mk-api is a plugin from Checkmk, Inc. A security vulnerability exists in Checkmk Exchange plugin check-mk-api, which stems from improper certificate validation and could lead to a man-in-the-middle attacker intercepting traffic...

Linux Distros Unpatched Vulnerability : CVE-2021-38492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in...

CVE-2023-27246

An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .htaccess file...

CVE-2021-3005

MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information e.g., a CPF number via a modified titulo aka invoice number value to the central/recibo.php URI...

CVE-2021-21494

MK-AUTH through 19.01 K4.9 allows XSS via the admin/logsajax.php tipo parameter. An attacker can leverage this to read the centralmka2 session token cookie, which is not set to HTTPOnly...

CVE-2021-21495

MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executarcentral.php?acao=altsenhaprinc URI...

CVE-2020-14072

An issue was discovered in MK-AUTH 19.01. It allows command execution as root via shell metacharacters to /auth admin scripts...

CVE-2020-14071

An issue was discovered in MK-AUTH 19.01. XSS vulnerabilities in admin and client scripts allow an attacker to execute arbitrary JavaScript code...