265 matches found
CVE-2026-52608
An incorrect access control vulnerability in reportico-web = 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into the PreExecuteCode attribute of any report regardless of the safemode setting leading to remote code execution...
CVE-2026-52608
reportico-web versions up to 8.1.0 have an incorrect access control flaw allowing unauthenticated attackers to inject arbitrary PHP into any report's PreExecuteCode attribute, bypassing safe_mode, leading to remote code execution. No patch version or in-the-wild exploitation details are provided ...
EUVD-2026-61091
An incorrect access control vulnerability in reportico-web = 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into the PreExecuteCode attribute of any report regardless of the safemode setting leading to remote code execution...
Keras has an untrusted deserialization vulnerability
A vulnerability in the TFSMLayer class of the keras package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of .keras models, even when safemode=True. This bypasses the security guarantees of safemode and enables arbitrary attacker-controlled...
EUVD-2007-5423
Malware in sbrugna...
EUVD-2002-0459
Malware in sbrugna...
EUVD-2008-2661
Malware in sbrugna...
EUVD-2010-1161
Malware in sbrugna...
EUVD-2006-4471
Malware in sbrugna...
EUVD-2018-0089
Malware in sbrugna...
EUVD-2007-1704
Malware in sbrugna...
EUVD-2010-1160
Malware in sbrugna...
EUVD-2007-0448
Malware in sbrugna...
EUVD-2005-3391
Malware in sbrugna...
EUVD-2007-4578
Malware in sbrugna...
EUVD-2008-5598
Malware in sbrugna...
EUVD-2009-3538
Malware in sbrugna...
EUVD-2007-2999
Malware in sbrugna...