CVE-2025-67418

ClipBucket 5.5.2 is affected by an improper access control flaw caused by hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these defaults, gaining full administrative control of the application. This CVE entry is support...

CVE-2025-34428 MailEnable < 10.54 Cleartext Credential Storage in AUTH.SAV

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.SAV with overly permissive filesystem access. A local...

EUVD-2025-199763

An unauthenticated administrative access vulnerability exists in the open-source HashTech project https://github.com/henzljw/hashtech 1.0 thru commit 5919decaff2681dc250e934814fc3a35f6093ee5 2021-07-02. Due to missing authentication checks on /adminindex.php, an attacker can directly access the...

EUVD-2015-0688

Malware in sbrugna...

EUVD-2014-2962

Malware in sbrugna...

EUVD-2014-3426

Malware in sbrugna...

EUVD-2017-14634

Malware in sbrugna...

EUVD-2005-3235

Malware in sbrugna...

EUVD-2018-12401

Malware in sbrugna...

EUVD-2019-15459

Malware in sbrugna...

EUVD-2025-8009

Malicious code in bioql PyPI...

EUVD-2022-40575

Malicious code in bioql PyPI...

EUVD-2024-33736

Malicious code in bioql PyPI...

EUVD-2025-11946

Malicious code in bioql PyPI...

EUVD-2025-8008

Malicious code in bioql PyPI...

EUVD-2025-8860

Malicious code in bioql PyPI...

EUVD-2025-21760

Malicious code in bioql PyPI...

CVE-2025-34223

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA/SaaS deployments contain a default admin account and an installation‑time endpoint at /admin/query/updatedatabase.php that can be accessed without authentication. An...

CVE-2025-34223

CVE-2025-34223 affects Vasion Print Virtual Appliance Host (pre-22.0.1049) and Vasion Print Application (pre-20.0.2786). An unauthenticated attacker can reach an installation-time endpoint at /admin/query/update_database.php, submit arbitrary root_user/root_password values, and replace the defaul...

Linux Distros Unpatched Vulnerability : CVE-2025-3580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server administrator account. Thi...