Newforma Project Center Server Code Execution Vulnerability

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. A code execution vulnerability exists in Newforma Project Center...

CVE-2025-35057

Newforma Info Exchange NIX '/RemoteWeb/IntegrationServices.ashx' allows a remote, unauthenticated attacker to cause NIX to make an SMB connection to an attacker-controlled system. The attacker can capture the NTLMv2 hash of the NIX service account...

EUVD-2025-33577

Newforma Info Exchange NIX accepts serialized .NET data via the '/remoteweb/remote.rem' endpoint, allowing a remote, unauthenticated attacker to execute arbitrary code with 'NT AUTHORITY\NetworkService' privileges. The vulnerable endpoint is used by Newforma Project Center Server NPCS, so a...

CVE-2025-35050

Newforma Info Exchange NIX accepts serialized .NET data via the '/remoteweb/remote.rem' endpoint, allowing a remote, unauthenticated attacker to execute arbitrary code with 'NT AUTHORITY\NetworkService' privileges. The vulnerable endpoint is used by Newforma Project Center Server NPCS, so a...

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. A code execution vulnerability exists in Newforma Project Center...

EUVD-2017-0199

Malware in sbrugna...

EUVD-2014-1079

Malware in sbrugna...

EUVD-2017-18427

Malware in sbrugna...

EUVD-2017-18426

Malware in sbrugna...

EUVD-2011-0185

Malware in sbrugna...

EUVD-2005-2639

Malware in sbrugna...

EUVD-2000-0256

Malware in sbrugna...

EUVD-2015-6955

Malware in sbrugna...

EUVD-2003-0719

Malware in sbrugna...

The vulnerability of the User Interface Tag and Backend Tag components of the IBM Instana Observability monitoring tool allows a attacker to execute arbitrary GET requests.

The vulnerability of the User Interface Tag and Backend Tag components of the IBM Instana Observability monitoring tool is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to execute arbitrary GET requests remotely...

EUVD-2023-33820

Malicious code in bioql PyPI...

Splunk Enterprise 9.1.0 < 9.1.10, 9.2.0 < 9.2.7, 9.3.0 < 9.3.5, 9.4.0 < 9.4.3 (SVD-2025-0703)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-0703 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

PHP 8.2.x < 8.2.29 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.2.29. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.29 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

The vulnerability of the Chamilo LMS system for electronic learning and content management lies in the insufficient verification of incoming requests used by the operating system. This allows attackers to execute arbitrary HTTP requests.

The vulnerability of the Chamilo LMS, a system for electronic teaching and content management, lies in the insufficient verification of incoming requests used by the operating system. Exploiting this vulnerability could allow a malicious actor to execute arbitrary HTTP requests remotely...

The vulnerability of the formSetSafeWanWebMan() function (/goform/SetRemoteWebCfg) in the Tenda AC6 router software allows a hacker to trigger a service failure.

The vulnerability of the formSetSafeWanWebMan function /goform/SetRemoteWebCfg in the Tenda AC6 router software lies in the issue of the operation exceeding the buffer boundaries in memory when processing the remoteIp parameter. Exploiting this vulnerability could allow an attacker to cause a...