EUVD-2012-4762

Malware in sbrugna...

EUVD-2016-9966

Malware in sbrugna...

EUVD-2012-4765

Malware in sbrugna...

EUVD-2020-17853

Malware in sbrugna...

EUVD-2015-5913

Malware in sbrugna...

EUVD-2013-0516

Malware in sbrugna...

EUVD-2019-1143

Malware in sbrugna...

EUVD-2024-38090

Malicious code in bioql PyPI...

EUVD-2022-27390

Malicious code in bioql PyPI...

EUVD-2022-46810

Malicious code in bioql PyPI...

EUVD-2022-4058

Malicious code in bioql PyPI...

EUVD-2023-1617

Malicious code in bioql PyPI...

EUVD-2023-30085

Malicious code in bioql PyPI...

EUVD-2022-27391

Malicious code in bioql PyPI...

CVE-2025-54251 Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate XML queries and gain limited unauthorized write access...

CVE-2025-54251 Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate XML queries and gain limited unauthorized write access...

CVE-2025-20218 Cisco Secure Firepower Management Center Software XPATH Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an authenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to insufficient input validation. An attacker could...

CVE-2023-26261

In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15...

CVE-2019-8158

An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craft a GET request to page cache block rendering module that gets passed to XML data processing engine without validation. The crafted key/value GET request data...

CVE-2019-0370

Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leading to XPath Injection...