RED-V Super Digital Signage System 安全漏洞

RED-V Super Digital Signage System is a digital signage system from RED-V, Italy. A security vulnerability exists in RED-V Super Digital Signage System version 5.1.1, which stems from the presence of an information disclosure vulnerability that could lead to unauthenticated access to sensitive we...

Linux Distros Unpatched Vulnerability : CVE-2025-32916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form...

EUVD-2001-1533

Malware in sbrugna...

EUVD-2001-1383

Malware in sbrugna...

EUVD-2013-4023

Malware in sbrugna...

EUVD-2011-1837

Malware in sbrugna...

EUVD-2015-7827

Malware in sbrugna...

EUVD-2011-4770

Malware in sbrugna...

EUVD-2004-0705

Malware in sbrugna...

EUVD-2011-4677

Malware in sbrugna...

EUVD-2015-2801

Malware in sbrugna...

EUVD-2013-6591

Malware in sbrugna...

EUVD-2011-4669

Malware in sbrugna...

EUVD-2009-2932

Malware in sbrugna...

EUVD-2024-39566

Malicious code in bioql PyPI...

EUVD-2021-31831

Malicious code in bioql PyPI...

Ilevia EVE X1 Server 4.7.18.0.eden Credentials Leak Through Log Disclosure

Summary EVE is a smart home and building automation solution designed for both residential and commercial environments, including malls, hotels, restaurants, bars, gyms, spas, boardrooms, and offices. It enables comprehensive control and monitoring of electrical installations through a highly...

CVE-2020-13129

An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platforms. The GET method is used with clientkey and deviceid data in the query string, which allows attackers to obtain sensitive information by reading web-server logs...

CVE-2009-2945

weblogin/login.fcgi aka the WebLogin login script in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading 1 web-serve...

copyparty vulnerable to path traversal attack

Summary All versions before 1.8.2 have a path traversal vulnerability, allowing an attacker to download unintended files from the server. Details Unauthenticated users were able to retrieve any files which are accessible according to OS-level permissions from the copyparty process. Usually, this ...