CVE-2026-82089

The wallabag aka fr.gaulupeau.apps.InThePoche application through 2.6.0 for Android allows XSS because /api/entries data is loaded into a WebView...

EUVD-2020-17882

Malware in sbrugna...

EUVD-2025-16210

Malicious code in bioql PyPI...

CVE-2025-32802 Insecure handling of file paths allows multiple local attacks

Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common configurations run Kea as root, leave the API entry points unsecured by default, and/or place the control sockets in insecure paths. This issue affects Kea versions...

PT-2025-16343

Name of the Vulnerable Software and Affected Versions cashbook version 4.0.3 Description The issue is related to an arbitrary file read vulnerability. It affects the "/api/entry/flow/invoice/show?invoice=" API endpoint, where the invoice parameter is involved. Recommendations For version 4.0.3,...

CVE-2025-27980

cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=...

PT-2025-23104

Name of the Vulnerable Software and Affected Versions Kea versions 2.4.0 through 2.4.1 Kea versions 2.6.0 through 2.6.2 Kea versions 2.7.0 through 2.7.8 Description Kea configuration and API directives can be used to load a malicious hook library. Many common configurations run Kea as root, leave...

CVE-2020-25191

The CVE-2020-25191 entry documents an authentication-agnostic issue in the NI CompactRIO API entry-point: default incorrect permissions could allow a non-authenticated user to trigger a function that rebooted the device remotely on Driver versions prior to 20.5. Affected product: CompactRIO contr...

PT-2020-16007

Name of the Vulnerable Software and Affected Versions National Instruments CompactRIO Driver versions prior to 20.5 Description The issue is related to incorrect default permissions for an API entry-point of a specific service. This allows a non-authenticated user to trigger a function that could...

National Instruments Compactrio License Issue Vulnerability

National Instruments Compactrio is an embedded controller for industrial control from National Instruments. An authorization issue vulnerability exists in versions prior to CompactRIO Driver 20.5, which stems from an incorrect privilege setting service for a specific API entry point by default,...