EUVD-2020-30166

Malware in sbrugna...

EUVD-2020-8800

Malware in sbrugna...

EUVD-2017-14962

Malware in sbrugna...

EUVD-2019-0113

Malware in sbrugna...

EUVD-2020-30164

Malware in sbrugna...

EUVD-2023-2748

Malicious code in bioql PyPI...

EUVD-2023-3250

Malicious code in bioql PyPI...

EUVD-2023-23972

Malicious code in bioql PyPI...

EUVD-2022-3068

Malicious code in bioql PyPI...

EUVD-2024-21393

Malicious code in bioql PyPI...

EUVD-2023-53715

Malicious code in bioql PyPI...

EUVD-2025-12106

Malicious code in bioql PyPI...

EUVD-2024-46968

Malicious code in bioql PyPI...

EUVD-2022-2800

Malicious code in bioql PyPI...

EUVD-2025-7065

Malicious code in bioql PyPI...

EUVD-2023-44231

Malicious code in bioql PyPI...

PT-2025-39837

Name of the Vulnerable Software and Affected Versions Mongoose versions 7.5 through 7.17 Description An integer overflow exists in the WebSocket component. Sending a specially crafted WebSocket request can cause the application to crash. Improper integration by downstream vendors may lead to a...

Generation of Predictable Numbers or Identifiers

Overview curl is a command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET and TFTP. libcurl offers a myriad of...

CVE-2025-55300 Komari Allows Cross-site WebSocket Hijacking

Komari is a lightweight, self-hosted server monitoring tool designed to provide a simple and efficient solution for monitoring server performance. Prior to 1.0.4-fix1, WebSocket upgrader has disabled origin checking, enabling Cross-Site WebSocket Hijacking CSWSH attacks against authenticated user...

Komari vulnerable to Cross-site WebSocket Hijacking

Summary WebSocket upgrader has disabled origin checking, enabling Cross-Site WebSocket Hijacking CSWSH attacks against authenticated users Details https://github.com/komari-monitor/komari/blob/bd5a6934e1b79a12cf1e6a9bba5372d0e04f3abc/api/terminal.goL33-L35 Any third party website can send request...