EUVD-2005-0149

Malware in sbrugna...

EUVD-2015-7903

Malware in sbrugna...

EUVD-2018-15848

Malware in sbrugna...

EUVD-2002-1309

Malware in sbrugna...

EUVD-2019-5995

Malware in sbrugna...

EUVD-2013-1460

Malware in sbrugna...

EUVD-2017-10780

Malware in sbrugna...

EUVD-2018-4357

Malware in sbrugna...

EUVD-2021-8693

Malicious code in bioql PyPI...

EUVD-2023-41209

Malicious code in bioql PyPI...

EUVD-2023-49661

Malicious code in bioql PyPI...

EUVD-2022-3734

Malicious code in bioql PyPI...

EUVD-2022-31835

Malicious code in bioql PyPI...

CVE-2025-56254

CVE-2025-56254 affects PHPGurukul Employee Leave Management System 2.1 with an Insecure Direct Object Reference (IDOR) in the file leave-details.php . An authenticated user can alter the URL parameter leaveid to access leave application details of other users, exposing sensitive data. Multiple co...

Security Bulletin: VInsecure Default Permissions in Apache Hadoop's RunJar.run() Expose Sensitive Data in Shared Temporary Directory, which affects IBM watsonx.data

Summary Apache Hadoop's RunJar.run does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content. This is because, on unix-like systems, the system temporary directory is shared between all...

CVE-2025-0082

In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

Linux Distros Unpatched Vulnerability : CVE-2019-10065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Open Ticket Request System OTRS 7.0 through 7.0.6. An attacker who is logged into OTRS as a customer user can use the search result...

CVE-2025-52580

Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

CVE-2024-36676

Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms...

CVE-2024-55452

A URL redirection vulnerability exists in UJCMS 9.6.3 due to improper validation of URLs in the upload and rendering of new block / carousel items. This vulnerability allows authenticated attackers to redirect unprivileged users to an arbitrary, attacker-controlled webpage. When an authenticated...