EUVD-2013-3621

Malware in sbrugna...

EUVD-2009-1225

Malware in sbrugna...

EUVD-2012-1838

Malware in sbrugna...

EUVD-2012-2549

Malware in sbrugna...

EUVD-2008-6605

Malware in sbrugna...

EUVD-2015-8172

Malware in sbrugna...

EUVD-2023-29936

Malicious code in bioql PyPI...

EUVD-2022-34907

Malicious code in bioql PyPI...

EUVD-2024-26836

Malicious code in bioql PyPI...

EUVD-2023-45284

Malicious code in bioql PyPI...

EUVD-2023-29110

Malicious code in bioql PyPI...

The vulnerability of the Siebel CRM End User component of the Oracle Siebel CRM system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Siebel CRM End User component of the Oracle Siebel CRM system is related to insufficient protection of administrative functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2025-3920

A vulnerability was identified in SUR-FBD CMMS where hard-coded credentials were found within a compiled DLL file. These credentials correspond to a built-in administrative account of the software. An attacker with local access to the system or the application's installation directory could extra...

CVE-2024-45170

An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper or missing access control, low privileged users can use administrative functions of the C-MOR web interface. It was found out that different functions are only available to administrative users. However, acces...

CVE-2023-49543

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

PT-2025-20908 · Ivanti · Ivanti Neurons For Itsm

Name of the Vulnerable Software and Affected Versions: Ivanti Neurons for ITSM versions prior to 2023.4 Ivanti Neurons for ITSM versions 2024.2 Ivanti Neurons for ITSM versions 2024.3 Description: An authentication bypass in Ivanti Neurons for ITSM allows a remote unauthenticated attacker to gain...

CVE-2024-25108

Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to access far more functionality than users intended, including to the administrative and moderator functionality of the Pixelfed server. This...

CVE-2024-20537

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to bypass the authorization mechanisms for specific administrative functions. This vulnerability is due to a lack of server-side validation of Administrator permissions. An attacker...

CVE-2024-20537

CVE-2024-20537 concerns Cisco Identity Services Engine (ISE) and affects the web-based management interface. The issue arises from a lack of server-side validation of administrator permissions, enabling an authenticated, remote attacker to bypass authorization for specific administrative function...

C-MOR Video Surveillance 5.2401 Improper Access Control

Advisory ID: SYSS-2024-024 Product: C-MOR Video Surveillance Manufacturer: za-internet GmbH Affected Versions: 5.2401 Tested Versions: 5.2401 Vulnerability Type: Improper Access Control CWE-284 Risk Level: High Solution Status: Fixed Manufacturer Notification: 2024-04-05 Solution Date: 2024-07-31...