298 matches found
PT-2025-50649
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed user-supplied HTML to inject DOM elements with IDs that collided with server-initialized data islands. These collisions could overwrite or shadow critical application state objects used by...
Exploit for Deserialization of Untrusted Data in Facebook React
🚀 React2Shell Exploiter Advanced Exploitation & Server I...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
╔═══════════════════════════════════════════════════════════...
DEBIAN-CVE-2025-66422
Tryton trytond before 7.6.11 allows remote attackers to obtain sensitive trace-back server setup information. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70...
IBM Concert Information Disclosure Vulnerability (CNVD-2026-07114)
IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform, announced by IBM in May 2024 at the IBMThink conference in Boston, USA. IBM Concert suffers from an information disclosure vulnerability that stems from t...
CVE-2025-36160
IBM Concert 1.0.0 through 2.0.0 could disclose sensitive server information from HTTP response headers that could aid in further attacks against the system...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the Server: DML component. A high privileged attacker can cause the server to hang or crash, and perform unauthorized update, insert, or delete operations on accessible data by sending crafted requests over the...
EUVD-2009-4999
Malware in sbrugna...
EUVD-2013-2980
Malware in sbrugna...
EUVD-2017-1915
Malware in sbrugna...
EUVD-2021-1806
Malware in sbrugna...
EUVD-2017-3327
Malware in sbrugna...
EUVD-2020-3428
Malware in sbrugna...
CVE-2025-11020
An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with Dangerous Type vulnerability in MarkAny SafePC Enterprise on Windows, Linux.This issue affects SafePC Enterprise: V7.0. V7.0.YYYY.MM.DD...
EUVD-2022-27875
Malicious code in bioql PyPI...
EUVD-2024-49638
Malicious code in bioql PyPI...
EUVD-2022-24368
Malicious code in bioql PyPI...
EUVD-2022-26829
Malicious code in bioql PyPI...
EUVD-2025-26424
Malicious code in bioql PyPI...
Tile trackers plagued by weak security, researchers warn
Researchers at the Georgia Institute of Technology scrutinized the security of the popular Tile tracker and came out disappointed. Bluetooth trackers are a steadily growing market, and Life360 is one of the major players. In 2021, Amazon expanded its Sidewalk network to include Tile. That means...