373 matches found
Apache Syncope allows malicious administrators to inject Groovy code
Apache Syncope offers the ability to extend / customize the base behavior on every deployment by allowing to provide custom implementations of a few Java interfaces; such implementations can be provided either as Java or Groovy classes, with the latter being particularly attractive as the machine...
CVE-2025-57738 Apache Syncope: Remote Code Execution by delegated administrators
Apache Syncope offers the ability to extend / customize the base behavior on every deployment by allowing to provide custom implementations of a few Java interfaces; such implementations can be provided either as Java or Groovy classes, with the latter being particularly attractive as the machine...
Phoca commander
Name: Phoca Company: - Email: [email protected] Extension: Phoca Commander Version: Old 4.0.0, 5.0.1 / New 4.0.2, 5.0.3 Update details: No access for unzip feature as default Update URL: https://github.com/PhocaCz/PhocaCommander/releases/tag/5.0.2 Changelog URL: Download URL:...
Claroty Secure Access 安全漏洞
Claroty Secure Access is a remote secure access management platform from Claroty USA. A security vulnerability exists in Claroty Secure Access versions 3.3.0 through 4.0.2, which stems from an incorrect OIDC authentication process that could result in an unauthorized user creating or impersonatin...
PT-2025-42006
Name of the Vulnerable Software and Affected Versions Claroty Secure Access versions 3.3.0 through 4.0.2 Description An incorrect OpenID Connect OIDC authentication flow can lead to unauthorized user creation or impersonation of existing OIDC users. Recommendations Update Claroty Secure Access to...
EUVD-2007-2621
Malware in sbrugna...
CVE-2025-61595
MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract,...
EUVD-2023-41759
Malicious code in bioql PyPI...
EUVD-2025-0051
Malicious code in bioql PyPI...
EUVD-2023-37486
Malicious code in bioql PyPI...
EUVD-2024-0924
Malicious code in bioql PyPI...
EUVD-2021-8036
Malicious code in bioql PyPI...
EUVD-2023-29414
Malicious code in bioql PyPI...
EUVD-2022-0215
Malicious code in bioql PyPI...
EUVD-2023-41760
Malicious code in bioql PyPI...
EUVD-2023-44604
Malicious code in bioql PyPI...
EUVD-2023-44605
Malicious code in bioql PyPI...
EUVD-2023-44606
Malicious code in bioql PyPI...
EUVD-2023-27732
Malicious code in bioql PyPI...
CVE-2025-61595 MANTRA tx gas limit is not enforced in send hooks
MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract,...