CVE-2026-86772 Snipe-IT 8.6.3 Stored XSS via Department Names

Snipe-IT versions before 8.7.0 contain a stored cross-site scripting vulnerability in DepartmentPresenter::formattedNameLink where department names are rendered unescaped in the fallback branch for users without departments.view permission. Users with departments.edit permission can inject...

openslides (2.2.0), openslides-presenter (2.0.3) +2 more potentially affected by CVE-2026-59890 via setuptools (38.7.0)

setuptools PYPI version 38.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides 2.2.0 - openslides-presenter 2.0.3 - openslides-protocol 1.0.0 - openslides-saml 1.0.0 Source cves: CVE-2026-59890 Source...

openslides (2.2.0), openslides-presenter (2.0.3) +2 more potentially affected by CVE-2026-59890 via setuptools (38.7.0)

setuptools PYPI version 38.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides 2.2.0 - openslides-presenter 2.0.3 - openslides-protocol 1.0.0 - openslides-saml 1.0.0 Source cves: CVE-2026-59890 Source...

openslides (2.2.0), openslides-presenter (2.0.3) +2 more potentially affected by CVE-2024-6345 via setuptools (38.7.0)

setuptools PYPI version 38.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - openslides 2.2.0 - openslides-presenter 2.0.3 - openslides-protocol 1.0.0 - openslides-saml 1.0.0 Source cves: CVE-2024-6345 Source advisor...

django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by unknown CVE via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: unknown CVE Source advisory: OSV:GHSA-GJ48-438W-JH9...

django-crispy-contact-form (>=0.3.6, <=0.3.8), multidocs (0.1.1) +9 more potentially affected by unknown CVE via bleach (2.1.4)

bleach PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on bleach and may be impacted: - django-crispy-contact-form =0.3.6, =2.2.0, =2.0.0, =0.5.0a2.post1, =0.4.0a5, =0.5.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8RFP-98V4-MMR...

MAL-2025-48809 Malicious code in circuit-runtime-presenter-test (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in circuit-runtime-presenter-test (npm)

--- -= Per source details. Do not edit below this line.=-...

EUVD-2008-3501

Malware in sbrugna...

EUVD-2008-3502

Malware in sbrugna...

EUVD-2019-4099

Malware in sbrugna...

EUVD-2019-4101

Malware in sbrugna...

EUVD-2024-52463

Malicious code in bioql PyPI...

EUVD-2025-30818

Malicious code in bioql PyPI...

EUVD-2025-30803

Malicious code in bioql PyPI...

CVE-2025-57432

Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication...

CVE-2025-57432

Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication...

CVE-2025-57432

Blackmagic Web Presenter version 3.3 is vulnerable to an unauthenticated command execution flaw due to a Telnet service exposed on port 9977. Because the service lacks authentication mechanisms, remote attackers can manipulate stream settings, change video modes, and potentially alter device func...

CVE-2025-57437

The Blackmagic Web Presenter HD firmware version 3.3 is vulnerable to sensitive information exposure via an unauthenticated Telnet service on port 9977 . An attacker connecting to this service can retrieve extensive configuration data, including device identifiers, network settings (IP, MAC, DNS)...

CVE-2025-57432

Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication...