210 matches found
VirtFusion 安全漏洞
VirtFusion is a virtualization management panel from VirtFusion, UK. A security vulnerability exists in VirtFusion 6.0.2 and earlier versions, which stems from an improper restriction of authentication attempts for the Email Change Handler component in the file /account/settings, which could lead...
OctoPrint-SpoolManager 授权问题漏洞
OctoPrint-SpoolManager is a plugin for managing spools and their usage metadata by Wild Rikku Individual Developers. An authorization issue vulnerability exists in OctoPrint-SpoolManager versions 1.8.0a2 and 1.7.7, which stems from the API not properly performing authentication or authorization...
CVE-2020-36854
The Async JavaScript plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.19.07.14. This is due to missing authorization checks on the ajsteps AJAX aciton along with a lack on sanitization on the settings saved via the function. This makes it...
CVE-2025-9152 Improper Privilege Management in Multiple WSO2 API Manager via keymanager-operations DCR Endpoint
An improper privilege management vulnerability exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR endpoint. A malicious user can exploit this flaw to generate access tokens with elevated privileges,...
PT-2025-42462
Name of the Vulnerable Software and Affected Versions WSO2 API Manager affected versions not specified Description An improper privilege management issue exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR...
EUVD-2025-34188
Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able t...
CVE-2025-7328
Multiple Broken Authentication security issues exist in the affected product. The security issues are due to missing authentication checks on critical functions. These could result in potential denial-of-service, admin account takeover, or NAT rule modifications. Devices would no longer be able t...
PT-2025-41910
Name of the Vulnerable Software and Affected Versions Rockwell Automation 1783-NATR affected versions not specified Description The affected product contains multiple broken authentication issues stemming from missing authentication checks on critical functions. These issues could lead to...
EUVD-2013-7271
Malware in sbrugna...
EUVD-2017-7868
Malware in sbrugna...
EUVD-2019-1019
Malware in sbrugna...
EUVD-2021-14400
Malware in sbrugna...
EUVD-2018-14223
Malware in sbrugna...
EUVD-2018-14304
Malware in sbrugna...
EUVD-2019-3354
Malware in sbrugna...
EUVD-2025-19747
Malicious code in bioql PyPI...
EUVD-2023-30280
Malicious code in bioql PyPI...
EUVD-2023-44901
Malicious code in bioql PyPI...