CVE-2025-62797 CSRF in FluxCP account endpoints allows account takeover / state-changing actions

FluxCP is a web-based Control Panel for rAthena servers written in PHP. A critical Cross-Site Request Forgery CSRF vulnerability exists in the FluxCP-based website template used by multiple rAthena/Ragnarok servers. State-changing POST endpoints accept browser-initiated requests that are authoriz...

EUVD-2020-22907

Malware in sbrugna...

EUVD-2019-3838

Malware in sbrugna...

EUVD-2023-41738

Malicious code in bioql PyPI...

EUVD-2023-44221

Malicious code in bioql PyPI...

EUVD-2023-51440

Malicious code in bioql PyPI...

EUVD-2024-28178

Malicious code in bioql PyPI...

CVE-2024-56529

Mailcow through 2024-11b has a session fixation vulnerability in the web panel. It allows remote attackers to set a session identifier when HSTS is disabled on a victim's browser. After a user logs in, they are authenticated and the session identifier is valid. Then, a remote attacker can access...