EUVD-2020-7270

Malware in sbrugna...

EUVD-2026-19763

Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via /.cassandra/cqlshhistory local file access. Users are recommended to upgrade to version 4.0.20, which fixes this issue. -- Description:...

EUVD-2025-209302

A container privilege escalation flaw was found in certain Web Terminal images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root...

EUVD-2026-17123

CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation...

EUVD-2026-44024

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

EUVD-2026-41006

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...

EUVD-2026-39232

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix global performance monitor reference counting In the SETGLOBAL ioctl, v3dperfmonfind bumps the reference count on the perfmon it returns, but v3dperfmonsetglobalioctl and v3dperfmondelete fail to release that referen...

EUVD-2024-37840

Malicious code in bioql PyPI...

EUVD-2026-2949

Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall...

EUVD-2019-9178

Malware in sbrugna...

EUVD-2021-20865

Malware in sbrugna...

EUVD-2026-44936

Microsoft Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName...

EUVD-2026-35723

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-57456

SiYuan: Static-file routes bypass the publish-access controls enforced on the REST API, exposing templates, snippets and export artifacts to anonymous readers...

EUVD-2026-60549

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability LTI under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage...

EUVD-2019-11702

Malware in sbrugna...

EUVD-2020-7924

Malware in sbrugna...

EUVD-2014-3149

Malware in sbrugna...

EUVD-2018-0957

Malware in sbrugna...

EUVD-2026-71007

SiYuan versions before v3.8.2 contain a denial of service vulnerability in the publish-service Basic Auth throttle that stores failed-attempt state using attacker-controlled usernames without enforcing capacity limits or eviction policies. Unauthenticated attackers can submit repeated...

EUVD-2026-55557

In the Linux kernel, the following vulnerability has been resolved: arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates When seccomp support was originally added to arm64 in a1ae65b21941 "arm64: add seccomp support", seccomp was erroneously called before the ptrace...

EUVD-2025-1902

Malicious code in bioql PyPI...

EUVD-2018-17598

Malware in sbrugna...

EUVD-2010-4192

Malware in sbrugna...

EUVD-2022-49192

Malicious code in bioql PyPI...

EUVD-2025-26961

Malicious code in bioql PyPI...

EUVD-2025-138042

Malicious code in flights-lutag-idobo npm...

EUVD-2026-45899

A vulnerability was found in the network packet de-fragmentation engine of kronosnet Version affected = 1.34. The internal reassembly code does not properly validate sequence numbers of incoming payload fragments. An attacker can exploit this lack of verification by transmitting malformed packets...

EUVD-2026-50218

The Apache Traffic Server certifier plugin generates certificates based on attacker-controlled client SNI. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which...

EUVD-2026-54809

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2C1202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist.name field and execute arbitrary commands by crafting a specific...

EUVD-2026-51419

WP Photo Album Plus is vulnerable to stored Cross-Site Scripting in all versions up to, and including, 9.2.03.001 through a decode-after-sanitize double-encoding flaw in the photo-comment pipeline. On write, wppadocomment sanitizes the comment with wppafilterhtml wpkses followed by wpstripalltags...

EUVD-2026-49331

phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the configuration API that allows authenticated administrators with CONFIGURATIONEDIT and ATTACHMENTADD privileges to write arbitrary PHP files by manipulating the upgrade.lastDownloadedPackage setting. Attackers can upload ...

EUVD-2019-11516

Malware in sbrugna...

EUVD-2024-49112

Malicious code in bioql PyPI...

EUVD-2022-51645

Malicious code in bioql PyPI...

EUVD-2020-1620

Malware in sbrugna...

EUVD-2026-64563

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbnetdev: Preserve RX queue depth on allocation failure ntbnetdevrxhandler hands the received skb to the network stack before allocating its replacement. If the allocation fails, nothing is reposted. Every failure therefore...

EUVD-2017-18736

Malware in sbrugna...

EUVD-2026-57192

A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via...

EUVD-2024-0178

Malicious code in bioql PyPI...

EUVD-2019-17327

Malware in sbrugna...

EUVD-2024-54722

Malicious code in bioql PyPI...

EUVD-2025-34679

go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents...

EUVD-2024-41695

Malicious code in bioql PyPI...

EUVD-2025-22233

Malicious code in bioql PyPI...

EUVD-2024-32995

Malicious code in bioql PyPI...

EUVD-2026-20896

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.6, OPNsense's LDAP authentication connector passes the login username directly into an LDAP search filter without calling ldapescape. An unauthenticated attacker can inject LDAP filter metacharacters into the username field ...

EUVD-2010-4164

Malware in sbrugna...

EUVD-2025-0014

Malicious code in bioql PyPI...

EUVD-2026-64045

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelController/TestLeaveController of the component Workflow Endpoint. Such manipulation leads to improper authorization. Th...