EUVD-2020-18101

Malware in sbrugna...

EUVD-2018-11288

Malware in sbrugna...

EUVD-2018-3506

Malware in sbrugna...

EUVD-2018-3504

Malware in sbrugna...

EUVD-2018-2200

Malware in sbrugna...

EUVD-2018-8763

Malware in sbrugna...

EUVD-2018-6804

Malware in sbrugna...

EUVD-2018-20642

Malware in sbrugna...

EUVD-2020-13476

Malware in sbrugna...

EUVD-2018-10410

Malware in sbrugna...

EUVD-2020-16439

Malware in sbrugna...

EUVD-2024-36209

Malicious code in bioql PyPI...

EUVD-2024-36208

Malicious code in bioql PyPI...

EUVD-2024-36207

Malicious code in bioql PyPI...

EUVD-2021-28094

Malicious code in bioql PyPI...

CVE-2021-36548

A remote code execution RCE vulnerability in the component /admin/index.php?id=themes=edittemplate=blog of Monstra v3.0.4 allows attackers to execute arbitrary commands via a crafted PHP file...

CVE-2021-40940

Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability...

CVE-2020-13978

Monstra CMS 3.0.4 allows an attacker, who already has administrative access to modify .chunk.php files on the Edit Chunk screen, to execute arbitrary OS commands via the Theme Module by visiting the admin/index.php?id=themes=editchunk URI. NOTE: there is no indication that the Edit Chunk feature...

CVE-2020-8439

Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit URI, as demonstrated by login=victim to the users/21/edit URI...

CVE-2020-25414

A local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4 which allows remote attackers to execute arbitrary PHP code...