EUVD-2026-28587

SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows remote attackers to read arbitrary local files and trigger deletion of files in the targeted directory with the...

EUVD-2025-209739

Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.execphp. NOTE: the Supplier disputes this because the API call is only available to admins and they are intentionally allowed to execute PHP code...

EUVD-2026-28427

The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0...

EUVD-2026-28336

Missing Authorization vulnerability in bPlugins PDF Poster allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF Poster: from n/a through 2.4.1...

EUVD-2026-28323

The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the unscheduledoriginalfiledeletion function in all versions up to, and including, 4.5.2 Th...

EUVD-2026-27873

NanoClaw contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prompt-injected container to read files outside the intended outbox directory by supplying crafted messagesout.id and content.files values or creati...

EUVD-2026-27815

In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - fix packet extraction from stream When processing TCP stream data in ovpntcprecv, we receive large cloned skbs from strprcv that may contain multiple coalesced packets. The current implementation has two bugs: 1. Head...

EUVD-2026-27096

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /chat WebSocket endpoint used by the Chat Trigger node's Hosted Chat feature did not verify that an incoming connection was authorized to interact with the target execution. An unauthenticated...

EUVD-2026-26895

mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP authcram MD5 digest...

EUVD-2026-17875

MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability that allows remote attackers to execute arbitrary code by sending crafted requests with malicious PHP code. Attackers can exploit insufficient input neutralization in the execution path to achieve...

EUVD-2026-8709

VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative actions in VMware Aria Operations. To remediate CVE-2026-22720, apply the patches listed in the 'Fixed...

EUVD-2025-208089

A vulnerability identified in the Trellix HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges. Utilization of a Bring Your Own Vulnerable Driver BYOVD was leveraged to gain access to the critical Windows process memory...

EUVD-2026-3280

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to version 1.13.2, unauthenticated requests could be proxied to remote environment agents, allowing access to remote environment resources without authentication. The environment proxy middleware handled...

EUVD-2025-205353

SOCA Access Control System 180612 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation. Attackers can craft malicious web pages that submit forged requests to create admin accounts by tricking logged-in users...

EUVD-2025-205011

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on...

EUVD-2025-197614

npm package expr-eval is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue...

EUVD-2025-144428

Malicious code in hereis-manic-tauwa npm...

EUVD-2025-33280

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql injection. It is possible to launch the attack remotely. The...

EUVD-2017-7505

Malware in sbrugna...

EUVD-2021-11168

Malware in sbrugna...

EUVD-2021-13806

Malware in sbrugna...

EUVD-2019-7057

Malware in sbrugna...

EUVD-2019-10560

Malware in sbrugna...

EUVD-2021-10081

Malware in sbrugna...

EUVD-2021-0760

Malware in sbrugna...

EUVD-2017-18208

Malware in sbrugna...

EUVD-2021-19451

Malware in sbrugna...

EUVD-2010-4603

Malware in sbrugna...

EUVD-2022-7282

Malicious code in bioql PyPI...

EUVD-2025-27058

Malicious code in bioql PyPI...

EUVD-2023-54265

Malicious code in bioql PyPI...

EUVD-2024-34707

Malicious code in bioql PyPI...

EUVD-2023-24069

Malicious code in bioql PyPI...

EUVD-2022-50373

Malicious code in bioql PyPI...

EUVD-2022-51716

Malicious code in bioql PyPI...

EUVD-2022-41110

Malicious code in bioql PyPI...

EUVD-2025-30242

Malicious code in bioql PyPI...

EUVD-2024-54813

Malicious code in bioql PyPI...

EUVD-2025-19328

Malicious code in bioql PyPI...

EUVD-2023-43777

Malicious code in bioql PyPI...

EUVD-2025-26335

Malicious code in bioql PyPI...

EUVD-2022-0662

Malicious code in bioql PyPI...

EUVD-2025-27770

Malicious code in bioql PyPI...

EUVD-2025-24827

Malicious code in bioql PyPI...

EUVD-2024-27363

Malicious code in bioql PyPI...

EUVD-2023-55083

Malicious code in bioql PyPI...

EUVD-2023-12442

Malicious code in bioql PyPI...

EUVD-2021-30064

Malicious code in bioql PyPI...

EUVD-2021-11133

The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin...

EUVD-2025-26346

A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423. This issue affects the function sub418030 of the file /boafrm/formParentControl. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly...