EUVD-2006-1736

Malware in sbrugna...

EUVD-2019-14638

Malware in sbrugna...

EUVD-2018-19673

Malware in sbrugna...

EUVD-2019-14841

Malware in sbrugna...

EUVD-2015-4392

Malware in sbrugna...

EUVD-2023-43252

Malicious code in bioql PyPI...

EUVD-2025-27939

Malicious code in bioql PyPI...

EUVD-2022-29920

Malicious code in bioql PyPI...

EUVD-2025-27656

Malicious code in bioql PyPI...

CVE-2025-59950

FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking protection confirmation dialog, it is possible to trick the admin into clicking the Promote button in another user's management page after the admin double clicks on a button...

PT-2025-39871

Name of the Vulnerable Software and Affected Versions Medical Informatics Engineering Enterprise Health affected versions not specified Description The software contains a cross site request forgery condition. An unauthenticated attacker can deceive administrative users into clicking a specially...

Malicious code in trick-free-spins-coin-master-march-2023-dezdzl (npm)

The package trick-free-spins-coin-master-march-2023-dezdzl was found to contain malicious code...

Malicious code in coin-master-free-spins-trick-march-2023-ekdlzd (npm)

The package coin-master-free-spins-trick-march-2023-ekdlzd was found to contain malicious code...

MAL-2025-46375 Malicious code in trick-free-spins-coin-master-march-2023-dezdzl (npm)

The package trick-free-spins-coin-master-march-2023-dezdzl was found to contain malicious code...

MAL-2025-43856 Malicious code in coin-master-free-spins-trick-march-2023-ekdlzd (npm)

The package coin-master-free-spins-trick-march-2023-ekdlzd was found to contain malicious code...

CVE-2025-9374 Ultimate Tag Warrior Importer <= 0.2 - Cross-Site Request Forgery

The Ultimate Tag Warrior Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to import tags granted they can...

Linux Distros Unpatched Vulnerability : CVE-2024-23831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LedgerSMB is a free web-based double-entry accounting system. When a LedgerSMB database administrator has an active session in /setup.pl, an attacker can trick...

CVE-2025-8102

CVE-2025-8102: Easy Digital Downloads for WordPress (versions ≤ 3.5.0) is vulnerable to Cross-Site Forgery via missing nonce checks in edd_sendwp_disconnect and edd_sendwp_remote_install. This CSRF allows unauthenticated attackers to deactivate or trigger activation/deactivation of the SendWP plu...

CVE-2025-55031

Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability affects...

CVE-2025-54144

Summary: CVE-2025-54144 affects Firefox for iOS before version 141. The URL scheme used to facilitate searching of text queries could be abused to open arbitrary website URLs or internal pages if a user is tricked into clicking a link. This is described as a security bypass in Firefox for iOS pri...