236 matches found
CVE-2023-53895 PimpMyLog 1.7.14 Improper Access Control via Account Creation Endpoint
PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint. Attackers can exploit the unsanitized username field to inject malicious JavaScript, create a hidden backdoor account,...
PT-2025-51743
Name of the Vulnerable Software and Affected Versions PimpMyLog version 1.7.14 Description The software contains an improper access control issue that allows remote attackers to create administrator accounts without authorization through the configuration endpoint. Attackers can exploit the...
EUVD-2019-18538
Malware in sbrugna...
EUVD-2013-3546
Malware in sbrugna...
EUVD-2020-4288
Malware in sbrugna...
EUVD-2008-4853
Malware in sbrugna...
EUVD-2020-3894
Malware in sbrugna...
EUVD-2019-18337
Malware in sbrugna...
EUVD-2018-10470
Malware in sbrugna...
EUVD-2017-2486
Malware in sbrugna...
EUVD-2021-23864
Malware in sbrugna...
EUVD-2005-0869
Malware in sbrugna...
EUVD-2020-26956
Malware in sbrugna...
EUVD-2015-2975
Malware in sbrugna...
EUVD-2022-35813
Malicious code in bioql PyPI...
EUVD-2022-48428
Malicious code in bioql PyPI...
EUVD-2022-36051
Malicious code in bioql PyPI...
CVE-2022-45562
Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high...
CVE-2022-32985
libnxapl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201...
CVE-2021-37292
An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocumented backdoor account. A malicious user can log in using the backdor account with admin highest privileges and obtain system control...