2218 matches found
CVE-2025-35055
Newforma Info Exchange (NIX) contains a file-upload vulnerability in /UserWeb/Common/UploadBlueimp.ashx that allows an authenticated attacker to upload arbitrary files to writable locations, enabling web-shell execution or directory deletion. Related CNVD and Red Hat entries describe a broader ri...
CVE-2025-35055 Newforma Info Exchange (NIX) insecure file upload
Newforma Info Exchange NIX '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrary file to any location writable by the NIX application. An attacker can upload and run a web shell or other content executable by the web server. An attacker can also delete...
PT-2025-41471
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX versions prior to 2023.1 Description Newforma Info Exchange NIX contains a flaw in the /UserWeb/Common/UploadBlueimp.ashx API endpoint that allows an authenticated attacker to upload arbitrary files to any location...
Chinese Hackers Weaponize Open-Source Nezha Tool in New Attack Wave
Threat actors with suspected ties to China have turned a legitimate open-source monitoring tool called Nezha into an attack weapon, using it to deliver a known malware called Gh0st RAT to targets. The activity, observed by cybersecurity company Huntress in August 2025, is characterized by the use...
EUVD-2021-25190
Malware in sbrugna...
EUVD-2017-14325
Malware in sbrugna...
EUVD-2017-3176
Malware in sbrugna...
EUVD-2020-16566
Malware in sbrugna...
EUVD-2021-11123
Malware in sbrugna...
EUVD-2021-19460
Malware in sbrugna...
EUVD-2014-9811
Malware in sbrugna...
EUVD-2021-13428
Malware in sbrugna...
EUVD-2019-3350
Malware in sbrugna...
EUVD-2018-19006
Malware in sbrugna...
EUVD-2024-45865
Malicious code in bioql PyPI...
EUVD-2025-28113
Malicious code in bioql PyPI...
EUVD-2024-43474
Malicious code in bioql PyPI...
EUVD-2024-43393
Malicious code in bioql PyPI...