EUVD-2014-0010

Malware in sbrugna...

EUVD-2016-9599

Malware in sbrugna...

EUVD-2005-2418

Malware in sbrugna...

EUVD-2008-4986

Malware in sbrugna...

EUVD-2021-24455

Malware in sbrugna...

EUVD-2017-3093

Malware in sbrugna...

EUVD-2001-1228

Malware in sbrugna...

EUVD-2018-17305

Malware in sbrugna...

EUVD-2016-9593

Malware in sbrugna...

EUVD-2022-6706

Malicious code in bioql PyPI...

EUVD-2024-47545

Malicious code in bioql PyPI...

TencentOS Server 3: php:7.3 (TSSA-2022:0049)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0049 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2025-3597

The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library is enabled. While this feature is meant to only be available to Pro version users, it can be activated in the free versi...

CVE-2025-3597 Firelight Lightbox < 2.3.15 - Contributor+ Stored XSS

The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library is enabled. While this feature is meant to only be available to Pro version users, it can be activated in the free versi...

Autoenum - Automatic Service Enumeration Script

Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments i.e. HTB, VulnHub, OSCP and draws a bit from a number of existing tools including AutoRecon https://github.com/Tib3rius/AutoRecon, Auto-Rec...

Design/Logic Flaw

In NetHack before 3.6.6, some out-of-bound values for the hilitestatus option can be exploited. NetHack 3.6.6 resolves this issue...

CVE-2019-5427

c3p0 version 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration...

SPHPBlog 0.4 Search.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13170/info sphpBlog is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

PHP-fusion dsmsf Mod Downloads - SQL Injection

PHP-fusion dsmsf Mod Downloads - SQL Injection ======================================================== PHP-fusion dsmsf module downloads SQL Inj3ct0r Exploit ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

[20091103] - Core - XML File Read Issue

It is possible to read the contents of an extension's XML file and find the version number of the installed extension. This could allow people to exploit a known security flaws for a specific version of an extension...