432693 matches found
EUVD-2026-31942
FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting XSS via attachment filenames in remediation verification file preview flows. User-supplied filename values are persisted and then rendered into HTML and...
EUVD-2026-31711
A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The affected element is the function formLogout of the file /goform/formLogout. The manipulation of the argument submit-url leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...
EUVD-2026-29911
Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud SaaS version. If a remote attacker sends a specially crafted request to the product's web service, arbitrary code may be executed when the product is configured to run pop3wallpasswd wi...
EUVD-2026-30048
The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. From 1.2581.0 to before 1.4304.0, Claude Desktop's SSH remote development feature verified only whether a hostname existed in /.ssh/knownhosts without comparing the server's...
EUVD-2026-29607
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
EUVD-2026-29456
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Blind SQL Injection.This issue affects Xpro Elementor Addons: from n/a through = 1.5.1...
EUVD-2025-209739
Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.execphp. NOTE: the Supplier disputes this because the API call is only available to admins and they are intentionally allowed to execute PHP code...
EUVD-2026-28453
Improper neutralization of special elements used in a command 'command injection' in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-28427
The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0...
EUVD-2026-28387
Weblate Vulnerable to Private Translation Enumeration via Screenshot API...
EUVD-2026-27382
An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. django.middleware.cache.UpdateCacheMiddleware erroneously caches requests where the Vary header contained an asterisk ''. This can lead to private data being stored and served. Earlier, unsupported Django series such as 5.0.x,...
EUVD-2026-26842
A vulnerability has been found in AV Stumpfl Pixera Two Media Server up to 25.1 R2. The affected element is an unknown function of the component Service Port 1338. Such manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. Upgrading to version 25.2 R3...
EUVD-2026-25930
When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to the RabbitMQ broker. Affected: Spring Boot 4.0.0–4.0.5 fix 4.0.6, 3.5.0–3.5.13 fix 3.5.14 per vendor advisory...
EUVD-2026-25595
Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, a vulnerability has been found in Dgraph that gives an unauthenticated attacker full read access to every piece of data in the database. This affects Dgraph's default configuration where ACL is not enabled. The attack require...
EUVD-2026-23116
Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place...
EUVD-2026-14407
An unauthenticated remote attacker can exploit a Pre-Auth blind SQL Injection vulnerability in the userinfo endpoint’s authentication method due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...
EUVD-2025-208089
A vulnerability identified in the Trellix HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges. Utilization of a Bring Your Own Vulnerable Driver BYOVD was leveraged to gain access to the critical Windows process memory...
EUVD-2025-205353
SOCA Access Control System 180612 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation. Attackers can craft malicious web pages that submit forged requests to create admin accounts by tricking logged-in users...
EUVD-2025-203263
A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickleconvert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree of...
EUVD-2025-34561
The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...
EUVD-2021-0108
Malware in sbrugna...
EUVD-2013-5821
Malware in sbrugna...
EUVD-2021-13806
Malware in sbrugna...
EUVD-2021-2574
Malware in sbrugna...
EUVD-2021-11168
Malware in sbrugna...
EUVD-2020-23344
Malware in sbrugna...
EUVD-2020-17093
Malware in sbrugna...
EUVD-2021-21279
Malware in sbrugna...
EUVD-2021-1139
Malware in sbrugna...
EUVD-2021-13851
Malware in sbrugna...
EUVD-2010-4603
Malware in sbrugna...
EUVD-2021-16051
Malware in sbrugna...
EUVD-2021-2194
Malware in sbrugna...
EUVD-2017-18208
Malware in sbrugna...
EUVD-2023-54361
Malicious code in bioql PyPI...
EUVD-2022-7747
Malicious code in bioql PyPI...
EUVD-2023-12615
Malicious code in bioql PyPI...
EUVD-2023-45841
Malicious code in bioql PyPI...
EUVD-2025-10450
Malicious code in bioql PyPI...
EUVD-2025-0021
Malicious code in bioql PyPI...
EUVD-2025-29456
Malicious code in bioql PyPI...
EUVD-2022-41110
Malicious code in bioql PyPI...
EUVD-2022-35061
Malicious code in bioql PyPI...
EUVD-2025-27086
Malicious code in bioql PyPI...
EUVD-2023-35115
Malicious code in bioql PyPI...
EUVD-2022-26179
Malicious code in bioql PyPI...
EUVD-2024-1857
Malicious code in bioql PyPI...
EUVD-2023-58939
Malicious code in bioql PyPI...