CVE-2026-56458: Permissive Cross-domain Policy with Untrusted Domains

HCL DevOps Deploy uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains...

CVE-2023-40771

SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function...

CVE-2025-1545: XML Injection (aka Blind XPath Injection)

An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least...

EUVD-2020-7868

Malware in sbrugna...

EUVD-2010-2239

Malware in sbrugna...

EUVD-2005-1028

Malware in sbrugna...

EUVD-2016-9566

Malware in sbrugna...

EUVD-2025-10931

Malicious code in bioql PyPI...

EUVD-2025-11714

Malicious code in bioql PyPI...

EUVD-2025-10932

Malicious code in bioql PyPI...

EUVD-2024-52432

Malicious code in bioql PyPI...

EUVD-2023-46914

Malicious code in bioql PyPI...

EUVD-2021-7850

Malicious code in bioql PyPI...

EUVD-2023-27058

Malicious code in bioql PyPI...

EUVD-2022-26168

Malicious code in bioql PyPI...

EUVD-2025-5065

Malicious code in bioql PyPI...

CVE-2025-52372

hMailServer v.5.8.6 is vulnerable to a security issue where a local attacker can obtain sensitive information by reading the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components. The vulnerability stems from the use of a weak hash (specifically MD5), which could al...

BIT-MOODLE-2024-45689 Moodle: unprotected access to sensitive information via dynamic tables

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access...

CVE-2025-39498

Insertion of Sensitive Information Into Sent Data vulnerability in Spotlight Spotlight - Social Media Feeds Premium allows Retrieve Embedded Sensitive Data.This issue affects Spotlight - Social Media Feeds Premium: from n/a through 1.7.1...

CVE-2024-48509

Learning with Texts LWT 2.0.3 is vulnerable to SQL Injection. This occurs when the application fails to properly sanitize user inputs, allowing attackers to manipulate SQL queries by injecting malicious SQL statements into URL parameters. By exploiting this vulnerability, an attacker could gain...