EUVD-2018-7886

Malware in sbrugna...

EUVD-2020-16316

Malware in sbrugna...

EUVD-2009-3474

Malware in sbrugna...

EUVD-2014-2157

Malware in sbrugna...

EUVD-2020-20635

Malware in sbrugna...

GO-2025-3771 Mattermost allows an unauthorized Guest user access to Playbook in github.com/mattermost/mattermost-server

Mattermost allows an unauthorized Guest user access to Playbook in github.com/mattermost/mattermost-server...

CVE-2025-7829 code-projects Church Donation System login.php sql injection

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The...

CVE-2024-54172

creationtimestamp| type| source ---|---|--- 2025-06-18 16:43:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18787 2025-06-18 19:49:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrvrpuczpr2a...

AWS VDP: Non-Production API Endpoints for the Route 53 Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration

The non-production API endpoints for the Route 53 service failed to log to CloudTrail, resulting in silent permission enumeration. Two non-production endpoints were found that could be used with standard IAM credentials without logging to CloudTrail. This allowed an adversary to perform permissio...

CVE-2025-22936

The CVE-2025-22936 entry affects Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router models SAM-4G1G-TT-W-VC and SAM-4F1F-TT-W-A1. The issue is a weak default WiFi password generation algorithm that could allow a remote attacker to obtain sensitive information. Per available documentation, CVSS ...

Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus

CVE-2021-40539 CVE-2021-40539: ADSelfService Plus RCE Vuln...

CVE-2024-27212

CVE-2024-27212 describes an out-of-bounds write in the init_data path (component listed as TBD) due to a missing bounds check. This leads to local privilege escalation with no additional privileges or user interaction required, as stated across multiple sources (NVD/Red Hat/OSV and Pixel bulletin...

CVE-2023-43770

creationtimestamp| type| source ---|---|--- 2023-09-28 11:42:17+00:00| published-proof-of-concept| https://t.me/CNArsenal/1202 2023-09-28 13:52:57+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5238 2023-09-28 15:18:12+00:00| published-proof-of-concept| https://t.me/proxybar/1739...

CVE-2023-21230

CVE-2023-21230 affects Google Wear OS / Android framework. A precondition check failure in the onAccessPointChanged method of AccessPointPreference.java could allow unprivileged apps to receive broadcasts about WiFi access point changes (including BSSID/SSID), enabling local information disclosur...

USN-6253-1: libvirt vulnerability

It wad discovered that libvirt incorrectly handled locking when processing certain requests. A local attacker could possibly use this issue to cause libvirt to stop responding or crash, resulting in a denial of service...

CVE-2023-32639

CVE-2023-32639 affects the Ministry of Justice’s Applicant Programme, specifically versions 7.06 and earlier . The root cause is improper restriction of XML External Entity (XXE) references , allowing processing of a crafted XML file to read arbitrary files on the system. Impact is high confident...

CVE-2023-1780

The CVE-2023-1780 affects the Companion Sitemap Generator WordPress plugin (versions before 4.5.3). It stems from not sanitising/escaping certain parameters before echoing them in pages, causing a Reflected Cross‑Site Scripting (XSS) vulnerability that could affect high‑privilege users (e.g., adm...

FormCraft <= 1.2.6 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2022-4007

GitLab CE/EE: A cross-site scripting (XSS) vulnerability in the title field of work items affects all versions from 15.3 up to, but not including, 15.7.8; 15.8 up to, but not including, 15.8.4; and 15.9 up to, but not including, 15.9.2. The issue allows attackers to perform arbitrary actions on b...

IBM Spectrum Protect Plus Container Backup and Restore权限提升漏洞

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM Corporation in the United States. The platform provides enterprises with a single point of control and management, and supports backup and recovery for virtual, physical and cloud environments of all sizes. IBM Spectrum...