1711 matches found
EUVD-2018-0144
Malware in sbrugna...
CVE-2025-61776: Insufficiently Protected Credentials
Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.13.5, Dependency-Track may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: cups (UTSA-2025-987463)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987463 advisory. OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the AuthType is set to...
CVE-2025-11284
A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of...
CVE-2025-11284 Zytec Dalian Zhuoyun Technology Central Authentication Service HTTP Header git hard-coded password
A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an unknown functionality of the file /index.php/auth/Ops/git of the component HTTP Header Handler. The manipulation of the argument Authorization leads to use of...
CVE-2025-11284
CVE-2025-11284 describes a vulnerability in Zytec Dalian Zhuoyun Technology Central Authentication Service (CAS) v3, affecting the HTTP Header Handler component. The flaw arises from a vulnerable handling of the Authorization argument in the request to /index.php/auth/Ops/git, which can lead to u...
PT-2025-40795
Name of the Vulnerable Software and Affected Versions Zytec Dalian Zhuoyun Technology Central Authentication Service version 3 Description A security issue exists in Zytec Dalian Zhuoyun Technology Central Authentication Service version 3 related to the HTTP Header Handler component. The issue...
Zytec Central Authentication Service 安全漏洞
Zytec Central Authentication Service is a centralized authentication service from China's Zhuo Yun Zytec Company. A security vulnerability exists in Zytec Central Authentication Service version 3, which stems from the incorrect operation of the HTTP header handler on the parameter Authorization,...
CVE-2025-61673
Karapace is an open-source implementation of Kafka REST and Schema Registry. Versions 5.0.0 and 5.0.1 contain an authentication bypass vulnerability when configured to use OAuth 2.0 Bearer Token authentication. If a request is sent without an Authorization header, the token validation logic is...
CVE-2025-61673 Karapace is vulnerable to Authentication Bypass
Karapace is an open-source implementation of Kafka REST and Schema Registry. Versions 5.0.0 and 5.0.1 contain an authentication bypass vulnerability when configured to use OAuth 2.0 Bearer Token authentication. If a request is sent without an Authorization header, the token validation logic is...
CVE-2025-61673 Karapace is vulnerable to Authentication Bypass
Karapace is an open-source implementation of Kafka REST and Schema Registry. Versions 5.0.0 and 5.0.1 contain an authentication bypass vulnerability when configured to use OAuth 2.0 Bearer Token authentication. If a request is sent without an Authorization header, the token validation logic is...
EUVD-2024-41740
Malicious code in bioql PyPI...
EUVD-2022-38832
Malicious code in bioql PyPI...
EUVD-2025-26385
Malicious code in bioql PyPI...
EUVD-2024-35276
Malicious code in bioql PyPI...
EUVD-2022-7062
Malicious code in bioql PyPI...
EUVD-2023-0227
Malicious code in bioql PyPI...
EUVD-2024-1419
Malicious code in bioql PyPI...