EUVD-2007-3090

Malware in sbrugna...

EUVD-1999-0864

Malware in sbrugna...

EUVD-2017-3758

Malware in sbrugna...

EUVD-2021-23355

Malware in sbrugna...

EUVD-2021-26539

Malware in sbrugna...

EUVD-2017-1606

Malware in sbrugna...

EUVD-1999-0476

Malware in sbrugna...

EUVD-2000-1133

Malware in sbrugna...

EUVD-2013-7024

Malware in sbrugna...

EUVD-2020-3940

Malware in sbrugna...

EUVD-2008-3158

Malware in sbrugna...

EUVD-2007-1060

Malware in sbrugna...

EUVD-2023-48191

Malicious code in bioql PyPI...

CVE-2024-52517

Nextcloud Server is a self hosted personal cloud system. After storing "Global credentials" on the server, the API returns them and adds them into the frontend again, allowing to read them in plain text when an attacker already has access to an active session of a user. It is recommended that the...

CVE-2024-29027

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 6.5.5 and 7.0.0-alpha.29, calling an invalid Parse Server Cloud Function name or Cloud Job name crashes the server and may allow for code injection, internal store manipulatio...

CVE-2024-25723

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. These are also patched...

CVE-2020-1099

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1100, CVE-2020-1101, CVE-2020-1106...

CVE-2019-5476

An SQL Injection in the Nextcloud Lookup-Server v0.3.0 running on https://lookup.nextcloud.com caused unauthenticated users to be able to execute arbitrary SQL commands...

CVE-2025-4894

A vulnerability classified as problematic was found in calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15. This vulnerability affects the function genrsakeys of the file common/crypto.py. The manipulation leads to inadequate encryption strength. The attack can be initiated...

CVE-2025-47269 code-server session cookie can be extracted by having user visit specially crafted proxy URL

code-server runs VS Code on any machine anywhere through browser access. Prior to version 4.99.4, a maliciously crafted URL using the proxy subpath can result in the attacker gaining access to the session token. Failure to properly validate the port for a proxy request can result in proxying to a...