EUVD-2021-22724

Malware in sbrugna...

EUVD-2017-1231

Malware in sbrugna...

EUVD-2017-1230

Malware in sbrugna...

EUVD-2017-4751

Malware in sbrugna...

EUVD-2017-1072

Malware in sbrugna...

EUVD-2006-5268

Malware in sbrugna...

EUVD-2025-24780

Malicious code in bioql PyPI...

EUVD-2022-0491

Malicious code in bioql PyPI...

EUVD-2022-45555

Malicious code in bioql PyPI...

EUVD-2023-54005

Malicious code in bioql PyPI...

EUVD-2021-8717

Malicious code in bioql PyPI...

CVE-2025-5948 Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business

The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's identity prior to claiming a business when using the claimbusiness AJAX action. This...

CVE-2025-10060

CVE-2025-10060 : MongoDB Server may allow upsert operations retried within a transaction to violate a unique index constraint, potentially causing an invariant failure and server crash during commit. Root cause: improper WriteUnitOfWork state management. Affected: MongoDB Server v6.0 before 6.0.2...

CVE-2025-8812 atjiu pybbs Admin Panel settings cross site scripting

A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects an unknown part of the file /api/settings of the component Admin Panel. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. Bento4 suffers from a denial of service vulnerability caused by a flaw in the Mp4Decrypt file Mp4Decrypt.cpp function AP4DataBuffer::SetDataSize. An attacker can exploit this vulnerability to cause a denial of service...

MongoDB 5.0.x < 5.0.31 / 6.0.x < 6.0.20 / 7.0.x < 7.0.16 / 8.0.x < 8.0.4 Improper Validation (SERVER-103153)

The version of MongoDB installed on the remote host is 5.0 prior to 5.0.31, 6.0 prior to 6.0.20, 7.0 prior to 7.0.16 and 8.0 prior to 8.0.4. It is, therefore, affected by a vulnerability as referenced in the SERVER-103153 advisory. - When run on commands with certain arguments set, explain may fa...

MongoDB 5.0.x < 5.0.31 / 6.0.x < 6.0.20 / 7.0.x < 7.0.16 DoS (SERVER-103152)

The version of MongoDB installed on the remote host is 5.0 prior to 5.0.31, 6.0 prior to 6.0.20 and 7.0 prior to 7.0.16. It is, therefore, affected by a vulnerability as referenced in the SERVER-103152 advisory. - Specifically crafted MongoDB wire protocol messages can cause mongos to crash durin...

CVE-2013-20004

A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on each connection attempt. An attacker could create a denial of service state by trying to connect a non-existent target multiple times. This affects iSCSI SAN Windows Native Versio...

CVE-2025-3015 Open Asset Import Library Assimp ASE File ASELoader.cpp BuildUniqueRepresentation out-of-bounds

A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASEImporter::BuildUniqueRepresentation of the file code/AssetLib/ASE/ASELoader.cpp of the component ASE File Handler. The manipulation of the argument mIndices leads ...

PT-2025-13834

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A problematic vulnerability was found in the Open Asset Import Library Assimp. This issue affects the function Assimp::MDLImporter::ParseTextureColorData of the MDL File Handler...