31 matches found
EUVD-2025-208827
The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack. The vulnerable cForm.importform function lacks CSRF token validation, enabling malicious websites to forge file upload requests that install...
CVE-2025-55040
The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack. The vulnerable cForm.importform function lacks CSRF token validation, enabling malicious websites to forge file upload requests that install...
EUVD-2018-18615
Malware in sbrugna...
EUVD-2008-5629
Malware in sbrugna...
EUVD-2017-15049
Malware in sbrugna...
EUVD-2018-9574
Malware in sbrugna...
EUVD-2005-0214
Malware in sbrugna...
EUVD-2015-8783
Malware in sbrugna...
EUVD-2020-5133
Malware in sbrugna...
EUVD-2020-15925
Malware in sbrugna...
EUVD-2017-15047
Malware in sbrugna...
EUVD-2005-0305
Malware in sbrugna...
EUVD-2012-4911
Malware in sbrugna...
EUVD-2013-0332
Malware in sbrugna...
EUVD-2015-8779
Malware in sbrugna...
EUVD-2025-5360
Malicious code in bioql PyPI...
CVE-2023-24269
An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute arbitrary code via a crafted Zip file...
CVE-2022-36943
SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of sanitization on paths which are symlinks. SSZipArchive will overwrite files on the filesystem when opening a malicious ZIP containing a symlink as the first item...
CVE-2018-1999020
Open Networking Foundation ONF ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproject/common/app/ApplicationArchive.java line 35 that can result in arbitrary file deletion overwrite. This attack appear to be exploitable vi...
Critical Commvault Command Center Flaw Enables Attackers to Execute Code Remotely
A critical security flaw has been disclosed in the Commvault Command Center that could allow arbitrary code execution on affected installations. The vulnerability, tracked as CVE-2025-34028 , carries a CVSS score of 9.0 out of a maximum of 10.0. "A critical security vulnerability has been...