CVE-2026-57305: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Assembla Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL using an attacker-specified username and password...

EUVD-2003-0414

Malware in sbrugna...

EUVD-2019-7800

Malware in sbrugna...

EUVD-2005-0423

Malware in sbrugna...

EUVD-2018-17216

Malware in sbrugna...

EUVD-2014-9510

Malware in sbrugna...

EUVD-2020-2743

Malware in sbrugna...

EUVD-2018-3571

Malware in sbrugna...

EUVD-2006-2444

Malware in sbrugna...

EUVD-2020-17711

Malware in sbrugna...

EUVD-2025-31755

Malicious code in bioql PyPI...

EUVD-2022-6490

Malicious code in bioql PyPI...

EUVD-2023-42725

Malicious code in bioql PyPI...

CVE-2025-5484

CVE-2025-5484 (SinoTrack GPS Receiver) affects SinoTrack devices with a central device management interface. The root cause is weak authentication: the username is the device identifier printed on the receiver and the default password is well-known and not enforced to be changed during setup. Thi...

CVE-2024-45283

SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the username and password when creating an RFC destination. After successful exploitation, an attacker can read the sensitive information but cannot modify or delete the data...

CVE-2019-17397

In the DoorDash application through 11.5.2 for Android, the username and password are stored in the log during authentication, and may be available to attackers via logcat...

Webmin 2.202 Remote Code Execution

Webmin version 2.202 suffers from a remote code execution vulnerability. Exploit Title: Webmin RCE Leading to Privilege Escalation Google Dork: N/A Date: 05-03-2025 Exploit Author: Buğra Enis Dönmez Vendor Homepage: https://webmin.com/ Software Link: https://webmin.com/ Version: 2.202 Tested on:...

CVE-2024-13317: Cross-Site Request Forgery (CSRF)

The ShipWorks Connector for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.5. This is due to missing or incorrect nonce validation on the 'shipworks-wordpress' page. This makes it possible for unauthenticated attackers to...

CVE-2024-48460: Improper Certificate Validation

An issue in Eugeny Tabby 1.0.213 allows a remote attacker to obtain sensitive information via the server and sends the SSH username and password even when the host key verification fails...

DRUPAL-CONTRIB-2025-001

This module enables you to do Two-Factor Authentication by email, using a user registered email to send a verification code to the user's email every time the user tries to log in to your site. The module did not sufficiently protect against brute force attacks, allowing an attacker to bypass the...