EUVD-2025-208509

Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction required. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-24, fixed 2025-11-03...

EUVD-2021-24599

Malware in sbrugna...

EUVD-2009-4061

Malware in sbrugna...

EUVD-2021-21610

Malware in sbrugna...

EUVD-2014-6122

Malware in sbrugna...

EUVD-2021-1660

Malware in sbrugna...

EUVD-2010-0416

Malware in sbrugna...

EUVD-2013-6918

Malware in sbrugna...

EUVD-2022-41571

Malicious code in bioql PyPI...

EUVD-2024-1694

Malicious code in bioql PyPI...

EUVD-2023-49386

Malicious code in bioql PyPI...

EUVD-2023-32941

Malicious code in bioql PyPI...

EUVD-2025-27485

Malicious code in bioql PyPI...

EUVD-2025-22224

Malicious code in bioql PyPI...

EUVD-2022-32994

Malicious code in bioql PyPI...

EUVD-2025-24030

Malicious code in bioql PyPI...

EUVD-2025-13594

Malicious code in bioql PyPI...

EUVD-2023-0759

Malicious code in bioql PyPI...

EUVD-2026-41668

In the Linux kernel, the following vulnerability has been resolved: afunix: Set gcinprogress to true in unixgc. Igor Ushakov reported that unixgc could run with gcinprogress being false if the work is scheduled while running: Thread 1 Thread 2 Thread 3 -------- -------- -------- unixschedulegc...

EUVD-2026-40866

Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub416f28 component...

EUVD-2026-39395

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...

EUVD-2026-36364

Due to incomplete input validation in Idira Privileged Session Manager for SSH PSMP versions prior to 15.0.2, 14.6.3, 14.2.5, and 14.0.6, an authenticated, low-privileged user could potentially execute arbitrary commands on the PSMP host. CyberArk Security Bulletins: CA26-17 and CA26-18...

EUVD-2021-34833

Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col' parameter in the Activity Log interface. Attackers can send requests to the logs endpoint with malicious SQL payloads in the 'col...

EUVD-2026-29604

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-17650

AVideo: Missing Authentication in CreatePlugin list.json.php Template Affects 21 Endpoints...

EUVD-2026-5423

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against users of the interface of an affected system. This vulnerability exists because the web-based management...

EUVD-2023-60161

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2025-179327

Malicious code in dependencies-galaxy-install-module npm...

EUVD-2015-0915

Malware in sbrugna...

EUVD-2021-0471

Malware in sbrugna...

EUVD-2016-2491

Malware in sbrugna...

EUVD-2015-7631

Malware in sbrugna...

EUVD-2010-0027

Malware in sbrugna...

EUVD-2017-14268

Malware in sbrugna...

EUVD-2022-2557

Malicious code in bioql PyPI...

EUVD-2023-26134

Malicious code in bioql PyPI...

EUVD-2025-4102

Malicious code in bioql PyPI...

EUVD-2022-0164

Malicious code in bioql PyPI...

EUVD-2025-16317

Malicious code in bioql PyPI...

EUVD-2022-34907

Malicious code in bioql PyPI...

EUVD-2025-13973

Malicious code in bioql PyPI...

EUVD-2025-29430

Malicious code in bioql PyPI...

EUVD-2022-3706

Malicious code in bioql PyPI...

EUVD-2022-33935

Malicious code in bioql PyPI...

EUVD-2026-68406

ToolJet before v3.16.208 fails to validate organization membership in database read routes, allowing any authenticated user to access other organizations' table schemas and row data. Attackers can supply arbitrary organization IDs in URL parameters to list tables, retrieve column definitions, and...

EUVD-2026-53922

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values SV frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect...

EUVD-2025-210451

An unauthenticated path traversal vulnerability exists in the web management interface of WTI Wireless Technology, Inc. version 3.5.0.r 2024/05/24 00:00:00. An unauthenticated attacker can craft malicious HTTP requests containing traversal sequences to access files outside of the intended web roo...

EUVD-2026-35726

Windows Kerberos Denial of Service Vulnerability...

EUVD-2025-209966

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix ntfsmountoptions leak in ntfsfillsuper In ntfsfillsuper, the fc-fsprivate pointer is set to NULL without first freeing the memory it points to. This causes the subsequent call to ntfsfsfree to skip freeing the...

EUVD-2026-31843

FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin. The log function in src/juniperplugin/fastnetmonjuniper.php lines 117-118 constructs shell commands by concatenating the $msg parameter directly into exec calls:...