EUVD-2018-20641

Malware in sbrugna...

EUVD-2018-6804

Malware in sbrugna...

EUVD-2018-8415

Malware in sbrugna...

EUVD-2018-8763

Malware in sbrugna...

EUVD-2018-8765

Malware in sbrugna...

EUVD-2018-8808

Malware in sbrugna...

EUVD-2018-3503

Malware in sbrugna...

EUVD-2018-18302

Malware in sbrugna...

EUVD-2020-16439

Malware in sbrugna...

EUVD-2024-36207

Malicious code in bioql PyPI...

EUVD-2024-36208

Malicious code in bioql PyPI...

EUVD-2024-36209

Malicious code in bioql PyPI...

EUVD-2021-28094

Malicious code in bioql PyPI...

CVE-2021-36548

A remote code execution RCE vulnerability in the component /admin/index.php?id=themes=edittemplate=blog of Monstra v3.0.4 allows attackers to execute arbitrary commands via a crafted PHP file...

CVE-2021-40940

Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability...

CVE-2020-13978

Monstra CMS 3.0.4 allows an attacker, who already has administrative access to modify .chunk.php files on the Edit Chunk screen, to execute arbitrary OS commands via the Theme Module by visiting the admin/index.php?id=themes=editchunk URI. NOTE: there is no indication that the Edit Chunk feature...

CVE-2020-8439

Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit URI, as demonstrated by login=victim to the users/21/edit URI...

CVE-2020-25414

A local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4 which allows remote attackers to execute arbitrary PHP code...

CVE-2020-20691

An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files...

CVE-2020-23697

Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php...