CanalDenuncia App Information Disclosure Vulnerability (CNVD-2025-30336)

CanalDenuncia App is a reporting channel application from CanalDenuncia Spain. An information disclosure vulnerability exists in CanalDenuncia App due to incorrect validation of the parameters iddenuncia and iduser authorization in /backend/api/buscarDocumentosByIdDenunciaUsuario.php. An attacker...

CVE-2025-41114 Missing Authorization vulnerability in CanalDenuncia.app

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'iddenuncia' and 'iduser' in '/backend/api/buscarDocumentosByIdDenunciaUsuario.php'...

CVE-2025-11843

Therefore Corporation GmbH has recently become aware that Therefore™ Online and Therefore™ On-Premises contain an account impersonation vulnerability. A malicious user may potentially be able to impersonate the web service account or the account of a service using the API when connecting to the...

PT-2025-44596

Name of the Vulnerable Software and Affected Versions Therefore Online affected versions not specified Therefore On-Premises affected versions not specified Description A malicious user may be able to impersonate the web service account or the account of a service using the API when connecting to...

Therefore Online和Therefore On-Premises 安全漏洞

Therefore Online and Therefore On-Premises are products of Therefore, a cloud-based document management system, and Therefore On-Premises, a document management system. A security vulnerability exists in Therefore Online and Therefore On-Premises that stems from an account impersonation...

EUVD-2016-7548

Malware in sbrugna...

EUVD-2009-4963

Malware in sbrugna...

EUVD-2017-0777

Malware in sbrugna...

EUVD-2015-2009

Malware in sbrugna...

EUVD-2015-0184

Malware in sbrugna...

EUVD-2007-4869

Malware in sbrugna...

EUVD-2000-0287

Malware in sbrugna...

EUVD-2024-51969

Malicious code in bioql PyPI...

EUVD-2023-38997

Malicious code in bioql PyPI...

EUVD-2024-49868

Malicious code in bioql PyPI...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

[SECURITY] Fedora 41 Update: mupdf-1.25.4-2.fc41

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

CVE-2025-55149

CVE-2025-55149 affects Tiny-Scientist (versions

CVE-2024-38370

GLPI is a free asset and IT management software package. Starting in 9.2.0 and prior to 11.0.0, it is possible to download a document from the API without appropriate rights. Upgrade to 10.0.16...

CVE-2019-1109

A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update addresses the...