EUVD-2020-4720

Malware in sbrugna...

EUVD-2019-2232

Malware in sbrugna...

EUVD-2021-1013

Malware in sbrugna...

EUVD-2019-17210

Malware in sbrugna...

EUVD-2000-0077

Malware in sbrugna...

EUVD-2024-2381

Malicious code in bioql PyPI...

EUVD-2023-29647

Malicious code in bioql PyPI...

EUVD-2025-16452

Malicious code in bioql PyPI...

EUVD-2022-29509

Malicious code in bioql PyPI...

EUVD-2025-7088

Malicious code in bioql PyPI...

EUVD-2024-1906

Malicious code in bioql PyPI...

EUVD-2025-23655

Malicious code in bioql PyPI...

EUVD-2024-1934

Malicious code in bioql PyPI...

PT-2025-31881 · Ratpanel · Ratpanel

Name of the Vulnerable Software and Affected Versions: RatPanel versions 2.3.19 through 2.5.5 Description: RatPanel is susceptible to remote code execution RCE and unauthorized access. An attacker who obtains the backend login path of RatPanel can execute system commands or take over hosts manage...

CVE-2015-10142 Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path

Sitecore Experience Platform XP prior to 8.0 Initial Release rev. 141212 and Content Management System CMS prior to 7.2 Update-3 rev. 141226 and prior to 7.5 Update-1 rev. 150130 contain a vulnerability that may allow an attacker to download files under the web root of the site when the name of t...

USN-7366-2: Rack vulnerabilities

USN-7366-1 fixed vulnerabilities in Rack. This update provides the corresponding updates for Ubuntu 25.04. Original advisory details: Nhật Thái Đỗ discovered that Rack incorrectly handled certain usernames. A remote attacker could possibly use this issue to perform CRLF injection. CVE-2025-25184...

CVE-2025-34120 LimeSurvey 2.0+ - 2.06+ Unauthenticated Arbitrary File Download via Serialized Backup Payload

An unauthenticated file download vulnerability exists in LimeSurvey versions from 2.0+ up to and including 2.06+ Build 151014. The application fails to validate serialized input to the admin backup endpoint index.php/admin/update/sa/backup, allowing attackers to specify arbitrary file paths using...

CVE-2025-40738

A vulnerability has been identified in SINEC NMS All versions V4.0. The affected application does not properly validate file paths when extracting uploaded ZIP files. This could allow an attacker to write arbitrary files to restricted locations and potentially execute code with elevated privilege...

PT-2025-25178 · Ossec · Ossec Hids Agent For Windows

Name of the Vulnerable Software and Affected Versions: OSSEC HIDS agent for Windows versions prior to 3.8.0 Description: The issue is related to improper input validation, allowing an attacker with control over the OSSEC server or in possession of the agent's key to configure the agent to connect...

CVE-2024-43011

An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier. Due to insufficient validation and sanitization of user input for file paths, an attacker can exploit this vulnerability by using directory traversal techniques to delete arbitrary file...