468644 matches found
EUVD-2026-17277
The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4. This is due to a REST API endpoint registered at /wp-json/gravitysmtp/v1/tests/mock-data with a permissioncallback that unconditionally returns true, allowing any...
EUVD-2026-17041
In Sofia on Xiongmai DVR/NVR AHB7008T-MH-V2 and NBD7024H-P 4.03.R11 devices, root OS command injection can occur via shell metacharacters in the HostName value via an authenticated DVRIP protocol TCP port 34567 request to the NetWork.NetCommon configuration handler, because system is used...
EUVD-2026-16951
A vulnerability was identified in elecV2 elecV2P up to 3.8.3. This affects the function eAxios of the file /mock of the component URL Handler. Such manipulation of the argument req leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly availabl...
EUVD-2026-14148
Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through = 7.41...
EUVD-2026-11367
StudioCMS S3 Storage Manager Authorization Bypass via Missing await on Async Auth Check...
EUVD-2026-10916
Sylius has a XSS vulnerability in checkout login form...
EUVD-2026-10350
A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...
EUVD-2026-10342
MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability. The application calls WinExec to execute Notepad++ without a fully qualified executable path when opening remote files. An attacker can exploit the search path behavior by placing a malicious executable...
EUVD-2026-9114
A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...
EUVD-2026-5616
Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to properly protect the .claude/settings.json configuration file when it did not exist at startup. While the parent directory was mounted as writable and .claude/settings.local.json...
EUVD-2026-3529
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
EUVD-2026-1861
EUVD-2026-1861...
EUVD-2025-205505
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
EUVD-2025-204614
FastAPI Users allows users to quickly add a registration and authentication system to their FastAPI project. Prior to version 15.0.2, the OAuth login state tokens are completely stateless and carry no per-request entropy or any data that could link them to the session that initiated the OAuth flo...
EUVD-2025-34919
DataEase is a data visualization and analytics platform. In DataEase versions through 2.10.13, a JDBC URL injection vulnerability exists in the DB2 and MongoDB data source configuration handlers. In the DB2 data source handler, when the extraParams field is empty, the HOSTNAME, PORT, and DATABASE...
EUVD-2006-6719
Malware in sbrugna...
EUVD-2021-1001
Malware in sbrugna...
EUVD-2021-2105
Malware in sbrugna...
EUVD-2020-0493
Malware in sbrugna...
EUVD-2020-28687
Malware in sbrugna...
EUVD-2020-24748
Malware in sbrugna...
EUVD-2021-20519
Malware in sbrugna...
EUVD-2021-22257
Malware in sbrugna...
EUVD-2021-12559
Malware in sbrugna...
EUVD-2019-16400
Malware in sbrugna...
EUVD-2008-3886
Malware in sbrugna...
EUVD-2007-3700
Malware in sbrugna...
EUVD-2021-10024
Malware in sbrugna...
EUVD-2021-16570
Malware in sbrugna...
EUVD-2021-0669
Malware in sbrugna...
EUVD-2021-11083
Malware in sbrugna...
EUVD-2019-2657
Malware in sbrugna...
EUVD-2025-20852
Malicious code in bioql PyPI...
EUVD-2021-9817
Malicious code in bioql PyPI...
EUVD-2024-53433
Malicious code in bioql PyPI...
EUVD-2022-27632
Malicious code in bioql PyPI...
EUVD-2024-39560
Malicious code in bioql PyPI...
EUVD-2024-17507
Malicious code in bioql PyPI...
EUVD-2024-41296
Malicious code in bioql PyPI...
EUVD-2024-2515
Malicious code in bioql PyPI...
EUVD-2022-39469
Malicious code in bioql PyPI...
EUVD-2022-53125
Malicious code in bioql PyPI...
EUVD-2025-10910
Malicious code in bioql PyPI...
EUVD-2022-33553
Malicious code in bioql PyPI...
EUVD-2024-52801
Malicious code in bioql PyPI...
EUVD-2024-36763
Malicious code in bioql PyPI...
EUVD-2023-0527
Malicious code in bioql PyPI...
EUVD-2025-11357
Malicious code in bioql PyPI...