PT-2025-50336

Name of the Vulnerable Software and Affected Versions Barracuda Service Center versions prior to 2025.1.1 Description The Barracuda Service Center, within the RMM solution, improperly validates the name of a WSDL service controlled by an attacker. This insecure reflection can lead to remote code...

EUVD-2007-2348

Malware in sbrugna...

EUVD-2009-0039

Malware in sbrugna...

EUVD-2013-6304

Malware in sbrugna...

EUVD-2008-0870

Malware in sbrugna...

EUVD-2013-1666

Malware in sbrugna...

EUVD-2017-7849

Malware in sbrugna...

EUVD-2018-8603

Malware in sbrugna...

EUVD-2013-0477

Malware in sbrugna...

EUVD-2022-33812

Malicious code in bioql PyPI...

EUVD-2023-33400

Malicious code in bioql PyPI...

EUVD-2023-51177

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2007-2353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the...

Malicious code in netsuite-suitetalk-wsdl-v2019-2.0 (npm)

The package netsuite-suitetalk-wsdl-v2019-2.0 was found to contain malicious code...

MAL-2025-27320 Malicious code in netsuite-suitetalk-wsdl-v2020-1.0 (npm)

The package netsuite-suitetalk-wsdl-v2020-1.0 was found to contain malicious code...

MAL-2025-27319 Malicious code in netsuite-suitetalk-wsdl-v2019-2.0 (npm)

The package netsuite-suitetalk-wsdl-v2019-2.0 was found to contain malicious code...

CVE-2018-17865

A cross-site scripting XSS vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject arbitrary web script via the wsdlPath parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2017-16665

RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a reflected Cross Site Scripting XSS attack via the service parameter to the /soap URI, triggering an invalid attempt to generate WSDL...

Linux Distros Unpatched Vulnerability : CVE-2013-6501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The default soap.wsdlcachedir setting in 1 php.ini-production and 2 php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier...

PT-2024-4722 · Unknown · Сервис Обновлений

Name of the Vulnerable Software and Affected Versions: Сервис обновлений affected versions not specified Description: The issue is related to the WSDL request handler in the "Сервис обновлений" software, which is associated with incorrect restriction of the directory path name. This could allow a...