EUVD-2002-0247

Malware in sbrugna...

EUVD-2018-8911

Malware in sbrugna...

EUVD-2012-5245

Malware in sbrugna...

EUVD-2020-10798

Malware in sbrugna...

EUVD-2019-4978

Malware in sbrugna...

EUVD-2001-0444

Malware in sbrugna...

EUVD-2017-7965

Malware in sbrugna...

EUVD-2020-5400

Malware in sbrugna...

EUVD-2025-25203

Malicious code in bioql PyPI...

EUVD-2022-24597

Malicious code in bioql PyPI...

EUVD-2024-16792

Malicious code in bioql PyPI...

EUVD-2021-32716

Malicious code in bioql PyPI...

EUVD-2024-42332

Malicious code in bioql PyPI...

EUVD-2024-32084

Malicious code in bioql PyPI...

EUVD-2025-7610

Malicious code in bioql PyPI...

CVE-2025-34178 Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting

In pfSense CE /suricata/suricataappparsers.php, the value of the policyname parameter is not sanitized of HTML-related strings/characters before being directly displayed. This can result in stored cross-site scripting. The attacker must be authenticated with at least "WebCfg - Services: suricata...

CVE-2025-34178 Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting

In pfSense CE /suricata/suricataappparsers.php, the value of the policyname parameter is not sanitized of HTML-related strings/characters before being directly displayed. This can result in stored cross-site scripting. The attacker must be authenticated with at least "WebCfg - Services: suricata...

CVE-2025-34177 Netgate pfSense CE Suricata package v7.0.8_2 Stored Cross-Site Scripting

In pfSense CE /suricata/suricataflowstream.php, the value of the policyname parameter is not sanitized of HTML-related strings/characters before being directly displayed. This can result in stored cross-site scripting. The attacker must be authenticated with at least "WebCfg - Services: suricata...

CVE-2025-34174

In pfSense CE /usr/local/www/statustraffictotals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings before being directly displayed in the input box. This value can be saved as the default value to be displayed to all use...

CVE-2025-34174

The CVE affects pfSense CE in the Status Traffic Totals feature: /usr/local/www/status_traffic_totals.php processes the start-day parameter. The parameter is not validated as numeric nor sanitized for HTML, allowing the value to be saved as the default display for all users, which triggers stored...