EUVD-2009-1775

Malware in sbrugna...

EUVD-2023-32339

Malicious code in bioql PyPI...

EUVD-2023-27760

Malicious code in bioql PyPI...

CVE-2025-7949 Sanluan PublicCMS preview.html redirect

A vulnerability was found in Sanluan PublicCMS up to 5.202506.a. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file publiccms-parent/publiccms/src/main/resources/templates/admin/cmsDiy/preview.html. The manipulation of the argument url lead...

PT-2025-27588 · WordPress · Soumettre.Fr

Name of the Vulnerable Software and Affected Versions: Soumettre.fr plugin for WordPress versions up to, and including, 2.1.5 Description: The issue is related to improper authorization checks on the make signature function, allowing unauthorized access and modification of data. This enables...

PT-2025-24130 · WordPress · Soli Wp Mail Options

Name of the Vulnerable Software and Affected Versions: Soli WP Mail Options versions 0.2.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

CVE-2025-5648

A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function rconspalinit in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity...

CVE-2024-52515

Nextcloud Server is a self hosted personal cloud system. After an admin enables the default-disabled SVG preview provider, a malicious user could upload a manipulated SVG file referencing paths. If the file would exist the preview of the SVG would preview the other file instead. It is recommended...

CVE-2023-28696

Cross-Site Request Forgery CSRF vulnerability in Harish Chouhan, Themeist I Recommend This allows Cross Site Request Forgery.This issue affects I Recommend This: from n/a through 3.9.0...

CVE-2014-10376

The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection...

PT-2025-16876 · Pgbouncer +3 · Pgbouncer +3

Name of the Vulnerable Software and Affected Versions: PgBouncer versions prior to 1.24.1 Description: The issue allows an attacker to log in with an already expired password due to PgBouncer's auth query not considering Postgres's VALID UNTIL value. This enables the use of passwords past their...

RUSTSEC-2025-0161 libsecp256k1 is unmaintained

The maintainers recommend using k256 instead...

VulnCheck KEV: CVE-2017-17731

DedeCMS through 5.7 has SQL Injection via the $FILES superglobal to plus/recommend.php...

CVE-2024-24972

The CVE-2024-24972 issue affects Gallagher Controller 6000 and Controller 7000 via a Buffer Copy without Checking Size of Input in the diagnostic web interface, enabling an authorized and authenticated operator to reboot the controller and cause a Denial of Service. Affected firmware histories in...

PT-2024-1255 · Edk2 +11 · Edk2 +11

Name of the Vulnerable Software and Affected Versions: EDK2 affected versions not specified Description: The issue is related to a buffer overflow vulnerability in EDK2's Network Package when handling the Server ID option from a DHCPv6 proxy Advertise message. This can be exploited by an attacker...

CVE-2023-28696

Cross-Site Request Forgery CSRF vulnerability in Harish Chouhan, Themeist I Recommend This allows Cross Site Request Forgery.This issue affects I Recommend This: from n/a through 3.9.0...

CVE-2023-28696

Cross-Site Request Forgery CSRF vulnerability in Harish Chouhan, Themeist I Recommend This allows Cross Site Request Forgery.This issue affects I Recommend This: from n/a through 3.9.0...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Harish Chouhan, Themeist I Recommend Tplugin = 3.9.0 versions...

CVE-2023-28696

CVE-2023-28696 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin I Recommend This (also listed as Themeist I Recommend This) affecting versions up to 3.9.0. The issue arises from CSRF protection weaknesses in the plugin, enabling unauthorized actions on a user’s account...

PT-2023-23563 · Unknown · @Fastify/Oauth2

Name of the Vulnerable Software and Affected Versions: @fastify/oauth2 versions prior to 7.2.0 Description: The issue arises from the statically generated state parameter used across all requests for all users, which should be unique per user to prevent Cross-Site-Request-Forgery attacks. The...