197 matches found
CVE-2025-63739
The Xinhu Rainrock RockOA version 2.7.0 is affected by an improper access control vulnerability (CWE-284) located in the phpinisaveAction function within the webmain/system/cogini/coginiAction.php file. This flaw allows authenticated users to modify PHP configuration files by manipulating the a p...
EUVD-2016-1845
Malware in sbrugna...
EUVD-2014-8766
Malware in sbrugna...
EUVD-2014-8513
Malware in sbrugna...
EUVD-2005-3992
Malware in sbrugna...
EUVD-2020-16981
Malware in sbrugna...
EUVD-2002-0250
Malware in sbrugna...
EUVD-2013-6304
Malware in sbrugna...
EUVD-2008-3640
Malware in sbrugna...
EUVD-2006-2822
Malware in sbrugna...
EUVD-2023-2223
Malicious code in bioql PyPI...
EUVD-2023-49503
Malicious code in bioql PyPI...
EUVD-2025-12530
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-32044
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user dataincluding names, contact information, and...
CVE-2012-10025
The WordPress plugin Advanced Custom Fields ACF version 3.5.1 and below contains a remote file inclusion RFI vulnerability in core/actions/export.php. When the PHP configuration directive allowurlinclude is enabled default: Off, an unauthenticated attacker can exploit the acfabspath POST paramete...
PHP Remote File Inclusion
Overview dolibarr/dolibarr is a modern and easy to use web software to manage your business. Affected versions of this package are vulnerable to PHP Remote File Inclusion in the perms process of menu creation and editing, where user-supplied input is evaluated without sufficient filtering of...
CVE-2024-10486
The Google for WooCommerce plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.8.6. This is due to publicly accessible printphpinformation.php file. This makes it possible for unauthenticated attackers to retrieve information about Webserver and PH...
CVE-2023-49103
An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...
CVE-2014-8939
Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information full path via an include/smarty/plugins/modifier.dateformat.php request if PHP has a non-recommended configuration that produces warning messages...