EUVD-2005-2073

Malware in sbrugna...

EUVD-2017-8315

Malware in sbrugna...

EUVD-2021-11106

Malware in sbrugna...

EUVD-2020-18547

Malware in sbrugna...

EUVD-2019-12053

Malware in sbrugna...

EUVD-2019-13490

Malware in sbrugna...

EUVD-2024-18947

Malicious code in bioql PyPI...

EUVD-2025-2535

Malicious code in bioql PyPI...

EUVD-2024-26029

Malicious code in bioql PyPI...

EUVD-2021-31003

Malicious code in bioql PyPI...

EUVD-2023-28824

Malicious code in bioql PyPI...

EUVD-2025-21350

Malicious code in bioql PyPI...

EUVD-2023-44663

Malicious code in bioql PyPI...

EUVD-2023-51774

Malicious code in bioql PyPI...

CVE-2025-22470

CVE-2025-22470 affects SATO CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with firmware versions prior to 1.15.5-r1. The vulnerability arises from the ability to upload crafted dangerous files, enabling an arbitrary Lua script to execute on the target system with root privileges. Public reference...

CVE-2023-2921

The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users with relatively low privilege on the site, like subscribers...

CVE-2024-7955

The Starbox WordPress plugin before 3.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-1664

The Responsive Gallery Grid WordPress plugin before 2.3.11 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-2492

The QueryWall: Plug'n Play Firewall WordPress plugin through 1.1.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

CVE-2022-20084

In telephony, there is a possible way to disable receiving emergency broadcasts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06498874; Issue ID:...