432695 matches found
EUVD-2026-25220
Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...
EUVD-2016-8837
Malware in sbrugna...
EUVD-2018-4605
Malware in sbrugna...
EUVD-2007-0363
Malware in sbrugna...
EUVD-2022-6755
Malicious code in bioql PyPI...
EUVD-2025-32031
Malicious code in bioql PyPI...
EUVD-2023-12750
Malicious code in bioql PyPI...
EUVD-2017-4608
Malware in sbrugna...
EUVD-2017-14016
Malware in sbrugna...
EUVD-2023-54736
Malicious code in bioql PyPI...
EUVD-2025-21001
Malicious code in bioql PyPI...
EUVD-2025-16317
Malicious code in bioql PyPI...
EUVD-2026-29408
The Coinbase Commerce for Contact Form 7 plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.1.2. This is due to a missing capability check and missing nonce verification in the savesettings function, which is registered on the adminpostcccf7savesettings...
EUVD-2026-27867
Facebook React has a Denial of Service Vulnerability in React Server Components...
EUVD-2026-27825
Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Gazelle incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...
EUVD-2026-26884
A weakness has been identified in privsim mcp-test-runner 0.2.0. Impacted is the function childprocess.spawn of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit...
EUVD-2026-20487
CI4MS Vulnerable to Post-Installation Re-entry via Cache-Dependent Install Guard Bypass...
EUVD-2026-9082
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.7, Gradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. Python 3.13+ change...
EUVD-2021-24599
Malware in sbrugna...
EUVD-2019-17172
Malware in sbrugna...
EUVD-2013-1316
Malware in sbrugna...
EUVD-2022-43483
Malicious code in bioql PyPI...
EUVD-2025-12213
Malicious code in bioql PyPI...
EUVD-2025-27485
Malicious code in bioql PyPI...
EUVD-2026-29669
Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally...
EUVD-2026-29628
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally...
EUVD-2026-1322
The WP Js List Pages Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' shortcode attribute in all versions up to, and including, 1.21 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
EUVD-2021-21610
Malware in sbrugna...
EUVD-2024-3212
Malicious code in bioql PyPI...
EUVD-2025-24030
Malicious code in bioql PyPI...
EUVD-2026-35843
CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this iss...
EUVD-2026-35794
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bound...
EUVD-2026-29428
Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote attacker to social engineer the user into selecting the modified firmware file to be uploaded. This would result in malitcious JavaScript execution in the context of the...
EUVD-2021-1660
Malware in sbrugna...
EUVD-2007-6099
Malware in sbrugna...
EUVD-2023-26134
Malicious code in bioql PyPI...
EUVD-2024-31641
Malicious code in bioql PyPI...
EUVD-2023-0759
Malicious code in bioql PyPI...
EUVD-2025-210431
ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classic. In versions prior to 10.15.3, the Updater on ownCloud 10 before 10.15.3 has an exposed dangerous method or function. Attackers with administrative privileges may leverage...
EUVD-2026-35391
TYPO3 CMS has Broken Access Control in its Form Framework...
EUVD-2026-15806
Mattermost versions 11.2.x = 11.2.2, 10.11.x = 10.11.10, 11.4.x = 11.4.0, 11.3.x = 11.3.1 fail to properly validate CSRF tokens in the /api/v4/accesscontrolpolicies/policyid/activate endpoint, which allows an attacker to trick an admin into changing access control policy active status via a craft...
EUVD-2026-13267
OpenClaw versions prior to 2026.2.21 contain an improper URL scheme validation vulnerability in the assertBrowserNavigationAllowed function that allows authenticated users with browser-tool access to navigate to file:// URLs. Attackers can exploit this by accessing local files readable by the...
EUVD-2026-11645
Poseidon V1 variable-length input collision via implicit zero-padding...
EUVD-2025-94745
Malicious code in thickalbatrossz3n npm...
EUVD-2015-0915
Malware in sbrugna...
EUVD-2022-40383
Malicious code in bioql PyPI...
EUVD-2025-17774
Malicious code in bioql PyPI...
EUVD-2022-2557
Malicious code in bioql PyPI...