357 matches found
EUVD-2018-9984
Malware in sbrugna...
EUVD-2012-5827
Malware in sbrugna...
EUVD-2013-4206
Malware in sbrugna...
CVE-2025-58584: Use of GET Request Method With Sensitive Query Strings
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally...
EUVD-2023-55133
Malicious code in bioql PyPI...
EUVD-2025-10903
Malicious code in bioql PyPI...
EUVD-2022-30427
Malicious code in bioql PyPI...
EUVD-2023-41788
Malicious code in bioql PyPI...
EUVD-2025-12783
Malicious code in bioql PyPI...
CVE-2025-43813
Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older...
CVE-2025-54542: Use of GET Request Method With Sensitive Query Strings
QuickCMS sends password and login via GET Request. This allows a local attacker with access to the victim's browser history to obtain the necessary credentials to log in as the user. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or...
CVE-2025-8997: Use of GET Request Method With Sensitive Query Strings
An Information Exposure vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited...
The vulnerability of the device management platform for systems related to heating, ventilation, and air conditioning, lighting, and energy consumption within the Niagara Framework, as well as the Niagara Enterprise Security tools for access control and security, stems from the ability to disclose information through a query string, allowing attackers to compromise the confidentiality of protected information.
The vulnerability of the device management platform for heating, ventilation, and air conditioning systems, lighting, and energy consumption, as well as the Niagara Framework and its access control and security measures, is related to the disclosure of information through query strings. Exploitin...
CVE-2025-51651: Use of GET Request Method With Sensitive Query Strings
An authenticated arbitrary file download vulnerability in the component /admin/Backups.php of Mccms v2.7.0 allows attackers to download arbitrary files via a crafted GET request...
CVE-2025-40742: Use of GET Request Method With Sensitive Query Strings
A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions V11.0, SIPROTEC 5 6MD85 CP200 All versions, SIPROTEC 5 6MD85 CP300 All versions V11.0, SIPROTEC 5 6MD86 CP200 All versions, SIPROTEC 5 6MD86 CP300 All versions V11.0, SIPROTEC 5 6MD89 CP300 All versions V11.0, SIPROTEC 5...
CVE-2025-52901: Use of GET Request Method With Sensitive Query Strings
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.33.9, access tokens are used as GET parameters. The JSON Web Token JWT which is used as a session identifier will get leaked to...
undertow: special character in query results in server errors
A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-RFC compliant characters resulting in a denial of service. The highest threat from this vulnerability is to system availability...
CVE-2025-49188: Use of GET Request Method With Sensitive Query Strings
The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering...
CVE-2024-9147
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Bna Informatics PosPratik allows XSS Through HTTP Query Strings. This issue affects PosPratik: before v3.2.1...