232 matches found
EUVD-2001-0689
Malware in sbrugna...
EUVD-2021-7929
Malicious code in bioql PyPI...
EUVD-2024-19889
Malicious code in bioql PyPI...
EUVD-2023-39053
Malicious code in bioql PyPI...
EUVD-2025-12808
Malicious code in bioql PyPI...
EUVD-2024-41746
Malicious code in bioql PyPI...
EUVD-2023-50983
Malicious code in bioql PyPI...
EUVD-2023-51800
Malicious code in bioql PyPI...
EUVD-2022-3729
Malicious code in bioql PyPI...
EUVD-2024-40427
Malicious code in bioql PyPI...
EUVD-2022-36209
Malicious code in bioql PyPI...
CVE-2024-51453
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
CVE-2024-51453 IBM Sterling Secure Proxy directory traversal
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
CVE-2024-51453
IBM Sterling Secure Proxy versions 6.2.0.0–6.2.0.1 are affected by a path traversal vulnerability that allows a remote attacker to view arbitrary files by sending URL requests containing dot-dot (../) sequences. Root cause: directory traversal in the web interface/file handling. Impact per IBM bu...
CVE-2024-52363
IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
CVE-2021-20708
NEC Aterm devices Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allow authenticated attackers to execute arbitrary OS commands by sending a specially crafted request to a specific URL...
CVE-2020-21574
Buffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial of service via a long url request which is passed to the delimitedread function...
CVE-2002-1990
Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet...
CVE-2024-55913
CVE-2024-55913 describes a path traversal in IBM Concert Software 1.0.0–1.0.5 that lets an attacker view arbitrary files via specially crafted URLs containing dot-dot sequences (/../). The root cause is improper handling of URL path components, enabling direct file disclosure without authenticati...
CVE-2025-25303
The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTranslator browser extension is vulnerable to SSRF attacks. The pdf.mjs script uses the URL parameter from the current URL as the file to download and display to the extension user...