205 matches found
CVE-2026-49488: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OpenMeetings. This issue affects Apache OpenMeetings: from 5.0.0 before 9.1.0. An attacker with moderator rights in any room can read arbitrary files accessible to the OS account running the OM...
PT-2026-58016
Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions 5.0.0 through 9.0.x Description A path traversal issue exists where the software fails to properly limit pathnames to a restricted directory. An attacker with moderator rights in any room can read arbitrary files...
CVE-2026-33266
Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in openmeetings.properties and not being auto-rotated. In case OM admin hasn't changed the default encryption key, an attacker who has stolen a cookie from a...
GHSA-78CG-FC6C-W44W Apache OpenMeetings has an Improper Handling of Insufficient Privileges vulnerability
Sny registered user can query web service with their credentials and get files/sub-folders of any folder by ID metadata only NOT contents. Metadata includes id, type, name and some other field. Full list of fields get be checked at FileItemDTO object. This issue affects Apache OpenMeetings: from...
CVE-2026-33005: Improper Handling of Insufficient Privileges
Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings. Any registered user can query web service with their credentials and get files/sub-folders of any folder by ID metadata only NOT contents. Metadata includes id, type, name and some other field. Full list of fields...
CVE-2026-34020: Use of GET Request Method With Sensitive Query Strings
Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings. The REST login endpoint uses HTTP GET method with username and password passed as query parameters. Please check references regarding possible impact This issue affects Apache OpenMeetings: from 3.1.3...
CVE-2026-33266: Use of Hard-coded Cryptographic Key
Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in openmeetings.properties and not being auto-rotated. In case OM admin hasn't changed the default encryption key, an attacker who has stolen a cookie from a...
EUVD-2016-0797
Malware in sbrugna...
EUVD-2021-1375
Malware in sbrugna...
EUVD-2016-0798
Malware in sbrugna...
EUVD-2022-2742
Malicious code in bioql PyPI...
EUVD-2022-2090
Malicious code in bioql PyPI...
EUVD-2022-4021
Malicious code in bioql PyPI...
EUVD-2022-3709
Malicious code in bioql PyPI...
EUVD-2022-4494
Malicious code in bioql PyPI...
EUVD-2022-2693
Malicious code in bioql PyPI...
EUVD-2022-1957
Malicious code in bioql PyPI...
EUVD-2022-4854
Malicious code in bioql PyPI...