39 matches found
CVE-2021-47941 WordPress Plugin Survey & Poll 1.5.7.3 SQL Injection via sss_params
WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wpsap cookie parameter. Attackers can craft SQL payloads in the cookie to extract sensitive database...
EquityPandit 安全漏洞
EquityPandit is a service platform provided by EquityPandit Inc. that offers stock market analysis, investment advice, and market predictions. Version 1.0 of EquityPandit has a security vulnerability. This vulnerability stems from insecure logging practices, which could allow attackers to access...
CVE-2018-25129
SOCA Access Control System 180612 contains multiple insecure direct object reference vulnerabilities that allow attackers to access sensitive user credentials. Attackers can retrieve authenticated and unauthenticated user password hashes and pins through unprotected endpoints like...
EUVD-2025-34933
The Restaurant Brands International RBI assistant platform through 2025-09-06 transmits passwords of user accounts in cleartext e-mail messages...
EUVD-2017-5694
Malware in sbrugna...
EUVD-2004-1782
Malware in sbrugna...
EUVD-2018-17530
Malware in sbrugna...
EUVD-2019-2977
Malware in sbrugna...
EUVD-2019-2940
Malware in sbrugna...
EUVD-2019-0739
Malware in sbrugna...
EUVD-2001-1383
Malware in sbrugna...
EUVD-2016-6866
Malware in sbrugna...
EUVD-2017-5989
Malware in sbrugna...
EUVD-1999-1196
Malware in sbrugna...
EUVD-2023-12124
Malicious code in bioql PyPI...
EUVD-2021-9837
Malicious code in bioql PyPI...
EUVD-2021-9995
Malicious code in bioql PyPI...
CVE-2025-36599
Dell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be...
CVE-2025-49188 Sensitive Data in URL
The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering...
CVE-2021-42557
In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials...