EUVD-2019-16274

Malware in sbrugna...

EUVD-2012-1126

Malware in sbrugna...

EUVD-2012-3346

Malware in sbrugna...

EUVD-2016-7700

Malware in sbrugna...

EUVD-2012-0087

Malware in sbrugna...

EUVD-2021-0965

Malware in sbrugna...

EUVD-2012-5520

Malware in sbrugna...

EUVD-2014-0140

Malware in sbrugna...

EUVD-2025-25909

Malicious code in bioql PyPI...

EUVD-2022-4914

Malicious code in bioql PyPI...

EUVD-2025-0149

Malicious code in bioql PyPI...

EUVD-2022-4175

Malicious code in bioql PyPI...

EUVD-2022-4840

Malicious code in bioql PyPI...

EUVD-2024-0882

Malicious code in bioql PyPI...

EUVD-2022-4788

Malicious code in bioql PyPI...

CVE-2025-50977

A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...

CVE-2025-50977

Gitblit (version 1.7.1) contains a template injection vulnerability that enables reflected XSS via the r parameter. Exploitation requires authenticated admin access and can be triggered through GET requests to the /summary endpoint or POST requests to certain Wicket interfaces, enabling injection...

CVE-2025-50977

A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...

PT-2025-34902 · Wicket · Wicket

Name of the Vulnerable Software and Affected Versions: versions prior to 1.7.1 Description: A template injection vulnerability leading to reflected cross-site scripting XSS has been identified, requiring authenticated admin access for exploitation. The vulnerability exists in the r parameter and...

CVE-2025-50977

A template injection vulnerability leading to reflected cross-site scripting XSS has been identified in version 1.7.1, requiring authenticated admin access for exploitation. The vulnerability exists in the 'r' parameter and allows attackers to inject malicious Angular expressions that execute...