EUVD-2006-0772

Malware in sbrugna...

EUVD-2008-5502

Malware in sbrugna...

EUVD-2019-16859

Malware in sbrugna...

EUVD-2023-26820

Malicious code in bioql PyPI...

EUVD-2022-49938

Malicious code in bioql PyPI...

EUVD-2023-52353

Malicious code in bioql PyPI...

EUVD-2023-26814

Malicious code in bioql PyPI...

EUVD-2022-37437

Malicious code in bioql PyPI...

CVE-2025-57769 FressRSS: Clickjacking can lead to XSS and/or privilege escalation

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below contain a vulnerability where a specially crafted page can trick a user into executing arbitrary JS code or promoting a user in FreshRSS by obscuring UI elements in iframes. If embedding an authenticated iframe is possibl...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on --- 🐱‍💻 ✂️ 🤬 LOG4J Java exploit - WAF and patches bypass tricks 📝 Description CVE-2021-44228 works on: log4j: 2.0 Upper Lookup The UpperLookup converts the passed in argument to upper case. Presumably the...

CVE-2025-58197

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Stored XSS.This issue affects Simple Download Monitor: from n/a through = 3.9.34...

Malicious code in updated-tricks-robux-generator-free_2023-ss1nujjg-pba (npm)

The package updated-tricks-robux-generator-free2023-ss1nujjg-pba was found to contain malicious code...

MAL-2025-37907 Malicious code in updated-tricks-v-bucks-generator-free_2023-bbi7zrezw (npm)

The package updated-tricks-v-bucks-generator-free2023-bbi7zrezw was found to contain malicious code...

Malicious code in updated-tricks-robux-generator-free_2023-ss1nujjg-ftr (npm)

The package updated-tricks-robux-generator-free2023-ss1nujjg-ftr was found to contain malicious code...

MAL-2025-37905 Malicious code in updated-tricks-robux-generator-free_2023-ss1nujjg-pba (npm)

The package updated-tricks-robux-generator-free2023-ss1nujjg-pba was found to contain malicious code...

MAL-2025-20933 Malicious code in free-codes-fortnite-2023-for-free-updated-tricks (npm)

The package free-codes-fortnite-2023-for-free-updated-tricks was found to contain malicious code...

Malicious code in updated-tricks-v-bucks-generator-free_2023-08ivy7m1f (npm)

The package updated-tricks-v-bucks-generator-free2023-08ivy7m1f was found to contain malicious code...

MAL-2025-37903 Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_wrhzdu (npm)

The package updated-tricks-roblox-robux-generator-2023-get-verifywrhzdu was found to contain malicious code...

CVE-2025-30027

CVE-2025-30027 affects Axis devices via insufficient input validation in ACAP configuration files, enabling arbitrary code execution. Exploitation requires the device to allow unsigned ACAP apps and a user to install a malicious ACAP application. Impact: high on confidentiality, integrity, and av...

git: Git does not sanitize URLs when asking for credentials interactively

A flaw was found in Git. This vulnerability occurs when Git requests credentials via a terminal prompt, for example, without the use of a credential helper. During this process, Git displays the host name for which the credentials are needed, but any URL-encoded parts are decoded and displayed...