254 matches found
EUVD-2005-0376
Malware in sbrugna...
EUVD-2006-4535
Malware in sbrugna...
EUVD-2006-0413
Malware in sbrugna...
EUVD-2008-1174
Malware in sbrugna...
EUVD-2010-2726
Malware in sbrugna...
EUVD-2021-25455
Malware in sbrugna...
EUVD-2007-3280
Malware in sbrugna...
EUVD-2005-0677
Malware in sbrugna...
EUVD-2008-2178
Malware in sbrugna...
EUVD-2007-0252
Malware in sbrugna...
EUVD-2013-3675
Malware in sbrugna...
EUVD-2010-1108
Malware in sbrugna...
EUVD-2022-6031
Malicious code in bioql PyPI...
EUVD-2025-18763
Malicious code in bioql PyPI...
Information Disclosure
github.com/traptitech/traq is vulnerable to Information Disclosure. The vulnerability is due to sensitive information such as OAuth tokens being recorded in SQL error log files when a query fails, which allows an attacker with log access to intentionally trigger errors and acquire the exposed dat...
traQ 日志信息泄露漏洞
traq is a PHP-based project management and issue tracking system by Jack Polgar, a personal developer. A log information disclosure vulnerability exists in versions of traQ prior to 3.25.0, which stems from recording sensitive information in SQL error logs, which could lead to information...
CVE-2025-44203
In HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb.php before the 'create database' button is pressed. By sending malformed POST requests to this endpoint, the attacker may obtain the administrator username, password hash, and salt. In some cases, th...
CVE-2025-44203
In HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb.php before the 'create database' button is pressed. By sending malformed POST requests to this endpoint, the attacker may obtain the administrator username, password hash, and salt. In some cases, th...
CVE-2025-44203
In HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb.php before the 'create database' button is pressed. By sending malformed POST requests to this endpoint, the attacker may obtain the administrator username, password hash, and salt. In some cases, th...
PT-2025-26429 · Unknown +1 · Hoteldruid +1
Name of the Vulnerable Software and Affected Versions: HotelDruid version 3.0.7 Description: The issue allows an unauthenticated attacker to exploit verbose SQL error messages on the "creadb.php" endpoint before the 'create database' button is pressed. By sending malformed POST requests to this...