EUVD-2017-11526

Malware in sbrugna...

EUVD-2020-27392

Malware in sbrugna...

EUVD-2019-4225

Malware in sbrugna...

EUVD-2018-14215

Malware in sbrugna...

EUVD-2020-27385

Malware in sbrugna...

EUVD-2019-7828

Malware in sbrugna...

EUVD-2023-44757

Malicious code in bioql PyPI...

EUVD-2024-50423

Malicious code in bioql PyPI...

EUVD-2025-7622

Malicious code in bioql PyPI...

EUVD-2023-45870

Malicious code in bioql PyPI...

EUVD-2025-6853

Malicious code in bioql PyPI...

Exploit for CVE-2015-4335

This is a PoC exploit for CVE-2015-4335, a Redis Lua sandbox escape and arbitrary code execution vulnerability. The tool, named redischeck, checks a Redis instance for security vulnerabilities. It performs three checks: 1 if the AUTH command is set, 2 if the CONFIG command has been renamed, and 3...

CVE-2025-20983

Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2025-25026

IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check...

CVE-2025-25026 IBM Security Guardium information disclosure

IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check...

CVE-2025-25026

CVE-2025-25026 affects IBM Guardium Data Protection (IBM Guardium Data Protection 12.0; also listed for 12.1 in the bulletin). Root cause: an incorrect authentication check allows an authenticated user to obtain sensitive information (information disclosure). CVSS: 4.3 (Med) with Network attack v...

PT-2025-23046 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 12.0 Description: The issue allows an authenticated user to obtain sensitive information due to an incorrect authentication check. Recommendations: For IBM Security Guardium version 12.0, consider restricting...

CVE-2019-10668

An issue was discovered in LibreNMS through 1.47. A number of scripts import the Authentication libraries, but do not enforce an actual authentication check. Several of these scripts disclose information or expose functions that are of a sensitive nature and are not expected to be publicly...

GHSA-RPG2-JVHP-H354 Yggdrasil Vulnerable to Local Privilege Escalation

A flaw was found in Yggdrasil, which acts as a system broker, allowing the processes to communicate to other children's "worker" processes through the DBus component. Yggdrasil creates a DBus method to dispatch messages to workers. However, it misses authentication and authorization checks,...

PT-2025-15232

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.3.0 Description Langflow is susceptible to unauthenticated remote code execution RCE due to missing authentication in the /api/v1/validate/code endpoint. A remote attacker can send crafted HTTP requests containing...