432697 matches found
EUVD-2026-29726
Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported download clients like qBittorrent. Prior to 2.9.10, Cleanuparr's global CORS policy reflects every request Origin and combines it with AllowCredentials. When DisableAuthForLocalAddresses ...
EUVD-2026-29445
Insecure generation of credentials in the local SAT Technical Support access functionality of the Ingecon Sun EMS Board. The vulnerability arose because the secret access credentials were not based on a secure cryptographic scheme, but rather on a weak hashing algorithm, which could allow an...
EUVD-2022-55976
WordPress Plugin Curtain 1.0.2 contains a cross-site request forgery vulnerability that allows attackers to activate or deactivate site maintenance mode by crafting malicious requests. Attackers can trick authenticated administrators into submitting forged requests to the options-general.php page...
EUVD-2026-28316
Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. From versions 1.0.0 to 2.2.26, Channel.java implements readObject and exposes deSerializeChannel which call ObjectInputStream.readObject on untrusted byte arrays without...
EUVD-2026-27096
n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /chat WebSocket endpoint used by the Chat Trigger node's Hosted Chat feature did not verify that an incoming connection was authorized to interact with the target execution. An unauthenticated...
EUVD-2026-26944
An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue...
EUVD-2026-26801
A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1STRINGdata in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulation of the argument transactionID/messageType leads to out-of-bounds read. The attack may be initiated...
EUVD-2026-26778
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort' parameter in all versions up to, and including, 1.13.18. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. The escsql functi...
EUVD-2026-25285
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, Flowise is vulnerable to a critical unauthenticated remote command execution RCE vulnerability. It can be exploited via a parameter override bypass using the FILE-STORAGE:: keyword combined wi...
EUVD-2025-204614
FastAPI Users allows users to quickly add a registration and authentication system to their FastAPI project. Prior to version 15.0.2, the OAuth login state tokens are completely stateless and carry no per-request entropy or any data that could link them to the session that initiated the OAuth flo...
EUVD-2025-33280
A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql injection. It is possible to launch the attack remotely. The...
EUVD-2021-20519
Malware in sbrugna...
EUVD-2021-24216
Malware in sbrugna...
EUVD-2019-7057
Malware in sbrugna...
EUVD-2021-11143
Malware in sbrugna...
EUVD-2008-5420
Malware in sbrugna...
EUVD-2021-18715
Malware in sbrugna...
EUVD-2020-28687
Malware in sbrugna...
EUVD-2021-1300
Malware in sbrugna...
EUVD-2020-18370
Malware in sbrugna...
EUVD-2025-25404
Malicious code in bioql PyPI...
EUVD-2021-8842
Malicious code in bioql PyPI...
EUVD-2021-32802
Malicious code in bioql PyPI...
EUVD-2025-30647
Malicious code in bioql PyPI...
EUVD-2023-0642
Malicious code in bioql PyPI...
EUVD-2025-6218
Malicious code in bioql PyPI...
EUVD-2022-51842
Malicious code in bioql PyPI...
EUVD-2023-43777
Malicious code in bioql PyPI...
EUVD-2023-12553
Malicious code in bioql PyPI...
EUVD-2024-35466
Malicious code in bioql PyPI...
EUVD-2025-0007
Malicious code in bioql PyPI...
EUVD-2022-51716
Malicious code in bioql PyPI...
EUVD-2025-30242
Malicious code in bioql PyPI...
EUVD-2024-54813
Malicious code in bioql PyPI...
EUVD-2025-25046
Malicious code in bioql PyPI...
EUVD-2025-18420
Malicious code in bioql PyPI...
EUVD-2025-26346
Malicious code in bioql PyPI...
EUVD-2025-19921
Malicious code in bioql PyPI...
EUVD-2025-16777
Malicious code in bioql PyPI...
EUVD-2024-18415
Malicious code in bioql PyPI...
EUVD-2022-51021
Malicious code in bioql PyPI...
EUVD-2022-15824
Malicious code in bioql PyPI...
EUVD-2023-0851
Malicious code in bioql PyPI...
EUVD-2025-20852
Malicious code in bioql PyPI...
EUVD-2025-21396
Malicious code in bioql PyPI...
EUVD-2026-51416
The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not perform capability or nonce checks on one of its payment-related AJAX actions, allowing any authenticated user with Subscriber-level access and above to disclose the payment details of any member by enumerating the payment...
EUVD-2026-44818
Node Version Manager nvm is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.32.1 through 0.40.5, nvm ls-remote and other commands that refresh remote LTS aliases, such as nvm install --lts parse the node.js mirror's index.tab and use each release's LTS...
EUVD-2026-44588
Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation. Refer to the ' Security...