EUVD-2020-25418

Malware in sbrugna...

EUVD-2019-16221

Malware in sbrugna...

EUVD-2020-25591

Malware in sbrugna...

EUVD-2005-2743

Malware in sbrugna...

EUVD-2019-9225

Malware in sbrugna...

EUVD-2023-0836

Malicious code in bioql PyPI...

EUVD-2023-54087

Malicious code in bioql PyPI...

EUVD-2024-54150

Malicious code in bioql PyPI...

EUVD-2023-29364

Malicious code in bioql PyPI...

EUVD-2024-47615

Malicious code in bioql PyPI...

EUVD-2024-16736

Malicious code in bioql PyPI...

EUVD-2024-33376

Malicious code in bioql PyPI...

EUVD-2024-54656

Malicious code in bioql PyPI...

EUVD-2024-27734

Malicious code in bioql PyPI...

CVE-2025-36023

Affected product: IBM Cloud Pak for Business Automation. Versions 24.0.0 through 24.0.0-IF005 and 24.0.1 through 24.0.1-IF002 are vulnerable. Root cause: indirect object reference via a user-controlled key allows an authenticated user to view sensitive user and system information. Impact: informa...

CVE-2024-47876

Sakai is a Collaboration and Learning Environment. Starting in version 23.0 and prior to version 23.2, kernel users created with type roleview can log in as a normal user. This can result in illegal access being granted to the system. Version 23.3 fixes this vulnerability...

CVE-2025-3844

CVE-2025-3844 concerns the PeproDev Ultimate Profile Solutions plugin for WordPress. Affected versions 1.9.1–7.5.2 are vulnerable to an Authentication Bypass via the handel_ajax_req() path on change_user_meta, enabling unauthenticated attackers to log in as other users (including administrators)....

CVE-2024-28746

Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permissions to access resources such as variables, connections, etc from the UI which they do not have permission to access. Users of Apache Airflow are recommended to upgrade to versi...

CVE-2024-7027

The WooCommerce - PDF Vouchers plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 4.9.3. This is due to insufficient verification on the user being supplied during a QR code login through the plugin. This makes it possible for unauthenticated attackers t...

CVE-2024-31906

IBM Automation Decision Services 23.0.2 allows web pages to be stored locally which can be read by another user on the system...