EUVD-2019-4473

Malware in sbrugna...

EUVD-2008-4497

Malware in sbrugna...

EUVD-2020-12510

Malware in sbrugna...

EUVD-2019-0872

Malware in sbrugna...

EUVD-2021-2889

Malicious code in bioql PyPI...

EUVD-2024-47134

Malicious code in bioql PyPI...

EUVD-2023-59727

Malicious code in bioql PyPI...

CVE-2025-9585

A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilithdeletepicfile of the file /usr/bin/webmgnt. This manipulation of the argument portaldeletepicname causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly...

CVE-2025-9585

CVE-2025-9585 affects Comfast CF-N1 2.6.0. The issue is in /usr/bin/webmgnt, in the wifilith_delete_pic_file function, where manipulating the portal_delete_picname argument leads to remote command injection. Public exploits have been disclosed. Likely impact includes remote code execution with hi...

Malicious code in @zalastax/nolb-_pic (npm)

The package @zalastax/nolb-pic was found to contain malicious code...

MAL-2025-13148 Malicious code in @zalastax/nolb-pic (npm)

The package @zalastax/nolb-pic was found to contain malicious code...

Malicious code in @zalastax/nolb-pic (npm)

The package @zalastax/nolb-pic was found to contain malicious code...

MAL-2025-10324 Malicious code in @zalastax/nolb-_pic (npm)

The package @zalastax/nolb-pic was found to contain malicious code...

CVE-2025-50234

MCCMS v2.7.0 has an SSRF vulnerability located in the index method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed. The pic parameter is decrypted using the sysauth$pic, 1 function, which utilizes a hard-coded key McEncryptionKey bD2voYwPpNuJ7B8, defined in the...

CVE-2025-50234

MCCMS v2.7.0 has an SSRF vulnerability located in the index method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed. The pic parameter is decrypted using the sysauth$pic, 1 function, which utilizes a hard-coded key McEncryptionKey bD2voYwPpNuJ7B8, defined in the...

PT-2025-32179 · Mccms · Mccms

Name of the Vulnerable Software and Affected Versions: MCCMS version 2.7.0 Description: MCCMS v2.7.0 contains a Server-Side Request Forgery SSRF vulnerability located in the index method of the sysappscontrollersapiGf.php file. The vulnerability occurs when processing the pic parameter. The pic...

mccms 安全漏洞

mccms Man City CMS is a rapid website builder system for individual developers of China Smokey River South chshcms. A security vulnerability exists in mccms version v2.7.0, which originates from improper handling of the pic parameter in the sysappscontrollersapiGf.php file, which may lead to SSRF...

Vulnerabilities fixed in Cisco ISE and ISE-PIC

Cisco has fixed vulnerabilities in Cisco ISE and ISE-PIC. The vulnerabilities are in the way Cisco ISE and ISE-PIC process files through APIs and validate user input. Unauthenticated attackers with access to the API interface can exploit these vulnerabilities to upload and execute arbitrary files...

[SECURITY] Fedora 41 Update: transfig-3.2.9a^20250619.ee3f4d8-1.fc41

The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Install transfig...

[SECURITY] Fedora 42 Update: transfig-3.2.9a^20250619.ee3f4d8-2.fc42

The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Install transfig...