207 matches found
Phpjabbers Member Login Script 环境问题漏洞
Phpjabbers Member Login Script is a Phpjabbers open source account management framework. An environmental issue vulnerability exists in Phpjabbers Member Login Script version 3.3, which stems from a client-side desynchronization vulnerability that could lead to manipulation of HTTP request...
CVE-2025-66553
Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.7 and 0.9.4, authenticated users were able to view meta data of columns in other tables of the Tables app by modifying the numeric ID in a request. This vulnerability is fixed in 0.8.7 and 0.9.4...
The vulnerability of the web interface of the NeMo Agent ToolKit, a tool for creating, profiling, and optimizing AI agents, allows a perpetrator to gain unauthorized access to protected information or cause service failures.
The vulnerability of the web interface of the NeMo Agent ToolKit, a tool for creating, profiling, and optimizing AI agents, is related to the manipulation of requests on the server side. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or...
The vulnerability of the Pandoc format conversion library written in Haskell lies in its susceptibility to manipulation at the server-side level, allowing attackers to disclose confidential information.
The vulnerability of the Pandoc format conversion library written in the Haskell programming language is related to the manipulation of requests on the server side. Exploiting this vulnerability allows a malicious actor to disclose protected information using elements...
EUVD-2025-37028
Kanova Android App version 1.0.27 package name com.karelane, developed by Karely L.L.C., contains improper access control vulnerabilities. Attackers may gain unauthorized access to user details and obtain group information, including entry codes, by manipulating API request parameters. Successful...
CVE-2025-61925: Use of Externally-Controlled Input to Select Classes or Code
Astro is a web framework. Prior to version 5.14.2, Astro reflects the value in X-Forwarded-Host in output when using Astro.url without any validation. It is common for web servers such as nginx to route requests via the Host header, and forward on other request headers. As such as malicious reque...
EUVD-2020-16516
Malware in sbrugna...
EUVD-2001-0422
Malware in sbrugna...
EUVD-2015-1894
Malware in sbrugna...
EUVD-2002-0301
Malware in sbrugna...
EUVD-2021-25867
Malware in sbrugna...
EUVD-2018-17485
Malware in sbrugna...
EUVD-2018-15693
Malware in sbrugna...
EUVD-2013-3857
Malware in sbrugna...
EUVD-2024-46892
Malicious code in bioql PyPI...
EUVD-2025-12638
Malicious code in bioql PyPI...
EUVD-2023-1887
Malicious code in bioql PyPI...
EUVD-2025-8737
Malicious code in bioql PyPI...