EUVD-2006-6907

Malware in sbrugna...

EUVD-2005-0677

Malware in sbrugna...

EUVD-2010-1108

Malware in sbrugna...

EUVD-2006-1009

Malware in sbrugna...

EUVD-2014-1905

Malware in sbrugna...

EUVD-2010-0407

Malware in sbrugna...

EUVD-2007-0252

Malware in sbrugna...

EUVD-2005-3017

Malware in sbrugna...

EUVD-2010-2858

Malware in sbrugna...

EUVD-2012-2728

Malware in sbrugna...

EUVD-2005-0376

Malware in sbrugna...

EUVD-2006-4535

Malware in sbrugna...

EUVD-2022-6031

Malicious code in bioql PyPI...

EUVD-2025-18763

Malicious code in bioql PyPI...

Information Disclosure

github.com/traptitech/traq is vulnerable to Information Disclosure. The vulnerability is due to sensitive information such as OAuth tokens being recorded in SQL error log files when a query fails, which allows an attacker with log access to intentionally trigger errors and acquire the exposed dat...

traQ 日志信息泄露漏洞

traq is a PHP-based project management and issue tracking system by Jack Polgar, a personal developer. A log information disclosure vulnerability exists in versions of traQ prior to 3.25.0, which stems from recording sensitive information in SQL error logs, which could lead to information...

CVE-2025-44203

In HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb.php before the 'create database' button is pressed. By sending malformed POST requests to this endpoint, the attacker may obtain the administrator username, password hash, and salt. In some cases, th...

CVE-2025-44203

In HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb.php before the 'create database' button is pressed. By sending malformed POST requests to this endpoint, the attacker may obtain the administrator username, password hash, and salt. In some cases, th...

CVE-2025-44203

In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is completed and performs database creation without locking. By sending many concurrent requests, an attacker can trigger a race condition during which verbose SQL error messages...

PT-2025-26429

Name of the Vulnerable Software and Affected Versions: HotelDruid version 3.0.7 Description: The issue allows an unauthenticated attacker to exploit verbose SQL error messages on the "creadb.php" endpoint before the 'create database' button is pressed. By sending malformed POST requests to this...