259 matches found
Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse
Summary A critical business logic vulnerability exists in the password reset mechanism of vikunja/api that allows password reset tokens to be reused indefinitely. Due to a failure to invalidate tokens upon use and a critical logic bug in the token cleanup cron job, reset tokens remain valid...
CVE-2026-28268
The CVE concerns Vikunja, an open-source self-hosted task management platform. Affected component: vikunja/api password reset mechanism. Root cause: password reset tokens are not invalidated after use and a token cleanup cron bug allows reset tokens to remain valid indefinitely. Impact: an attack...
CyberPanel-Poc
CyberPanel XSS to RCE CVE-2026-XXXXX One-click Remote Code...
CVE-2023-43309
There is a stored cross-site scripting XSS vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run malicious scripts by injecting a specially crafted payload...
APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign
A Pakistan-nexus threat actor has been observed targeting Indian government entities as part of spear-phishing attacks designed to deliver a Golang-based malware known as DeskRAT. The activity, observed in August and September 2025 by Sekoia, has been attributed to Transparent Tribe aka APT36, a...
EUVD-2007-6384
Malware in sbrugna...
EUVD-2007-4377
Malware in sbrugna...
EUVD-2020-6560
Malware in sbrugna...
EUVD-2011-0466
Malware in sbrugna...
EUVD-2006-1753
Malware in sbrugna...
EUVD-2013-4420
Malware in sbrugna...
EUVD-2021-14307
Malware in sbrugna...
EUVD-2005-4655
Malware in sbrugna...
EUVD-2021-14308
Malware in sbrugna...
EUVD-2017-8549
Malware in sbrugna...
EUVD-2023-47728
Malicious code in bioql PyPI...
CVE-2025-9894
CVE-2025-9894 affects the Sync Feedly WordPress plugin (versions
PT-2025-39714
Name of the Vulnerable Software and Affected Versions Sync Feedly plugin for WordPress versions prior to 1.0.2 Description The software is susceptible to a Cross-Site Request Forgery issue. This is due to a lack of proper nonce validation within the crsf cron job func function. An unauthenticated...
PT-2025-34370 · Ibm · Qradar Siem
Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.5 through 7.5.0 UP13 Description: IBM QRadar SIEM versions 7.5 through 7.5.0 UP13 may allow an authenticated user to escalate their privileges. This is due to a misconfigured cronjob that executes with unnecessary...