CVE-2026-23495

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Prior to 2.2.3 and 1.7.16, the API endpoint for listing Predefined Properties in the Pimcore platform lacks adequate server-side authorization checks. Predefined Properties are configurable metadata definitions e.g., name, key, typ...

PT-2026-2475

Backend users with access to the redirects module and write permission on the sys redirect table were able to read, create, and modify any redirect record without restriction to the user’s own file-mounts or web-mounts. This allowed attackers to insert or alter redirects pointing to arbitrary URL...

CVE-2019-12426

an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06...

CVE-2019-12517

An XSS issue was discovered in the slickquiz plugin through 1.3.7.1 for WordPress. The savequizscore functionality available via the /wp-admin/admin-ajax.php endpoint allows unauthenticated users to submit quiz solutions/answers, which are stored in the database and later shown in the WordPress...

GitHub Enterprise Server 安全漏洞

GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server versions...

CVE-2025-12636

The Ubia camera ecosystem fails to adequately secure API credentials, potentially enabling an attacker to connect to backend services. The attacker would then be able to gain unauthorized access to available cameras, enabling the viewing of live feeds or modification of settings...

EUVD-2021-0040

Malware in sbrugna...

EUVD-2007-3479

Malware in sbrugna...

EUVD-2018-8440

Malware in sbrugna...

EUVD-2021-21230

Malware in sbrugna...

EUVD-2010-5008

Malware in sbrugna...

EUVD-2019-0804

Malware in sbrugna...

EUVD-2022-26446

Malicious code in bioql PyPI...

EUVD-2025-5494

Malicious code in bioql PyPI...

EUVD-2025-6937

Malicious code in bioql PyPI...

EUVD-2021-30487

Malicious code in bioql PyPI...

EUVD-2024-3132

Malicious code in bioql PyPI...

EUVD-2022-1993

Malicious code in bioql PyPI...

EUVD-2022-5502

Malicious code in bioql PyPI...

GHSA-J8VM-7Q52-2M2M TYPO3 CSV download feature information disclosure

Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having access to them...