EUVD-2025-200208

The SureMail – SMTP and Email Logs Plugin for WordPress is vulnerable to Unrestricted Upload of File with Dangerous Type in versions up to and including 1.9.0. This is due to the plugin's savefile function in inc/emails/handler/uploads.php which duplicates all email attachments to a web-accessibl...

CVE-2025-11746 XStore | Multipurpose WooCommerce Theme <= 9.5.4 - Authenticated (Subscriber+) Local File Inclusion

The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via theetajaxrequiredpluginspopup function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .php files on t...

EUVD-2006-6516

Malware in sbrugna...

EUVD-2004-1423

Malware in sbrugna...

EUVD-2005-3762

Malware in sbrugna...

EUVD-2004-2248

Malware in sbrugna...

EUVD-2019-8568

Malware in sbrugna...

EUVD-2019-10937

Malware in sbrugna...

EUVD-2008-2387

Malware in sbrugna...

EUVD-2010-4285

Malware in sbrugna...

EUVD-2021-30121

Malicious code in bioql PyPI...

EUVD-2023-52434

Malicious code in bioql PyPI...

EUVD-2022-43406

Malicious code in bioql PyPI...

EUVD-2022-46099

Malicious code in bioql PyPI...

EUVD-2025-18951

Malicious code in bioql PyPI...

EUVD-2024-21215

Malicious code in bioql PyPI...

EUVD-2023-52747

Malicious code in bioql PyPI...

EUVD-2022-30164

Malicious code in bioql PyPI...

EUVD-2022-31604

Malicious code in bioql PyPI...

PT-2025-26645 · Convoy · Convoy

Name of the Vulnerable Software and Affected Versions: Convoy versions 3.9.0-rc3 through 4.4.0 Description: Convoy is a KVM server management panel for hosting businesses. A directory traversal vulnerability exists in the LocaleController component, allowing an unauthenticated remote attacker to...