528 matches found
PT-2025-44525
Name of the Vulnerable Software and Affected Versions Nagios Log Server versions prior to 2024R1.3.2 Description Nagios Log Server versions prior to 2024R1.3.2 contain a privilege escalation issue in the account email-change workflow. A user can set their email to an invalid value, and due to...
Nagios Log Server 安全漏洞
Nagios Log Server is a suite of centralized log management, monitoring, and analysis software from Nagios, Inc. A security vulnerability exists in Nagios Log Server versions prior to 2024R1.3.2 that stems from insufficient validation and authorization checks in the account email change process,...
CVE-2025-12310
A security vulnerability has been detected in VirtFusion up to 6.0.2. This vulnerability affects unknown code of the file /account/settings of the component Email Change Handler. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be initiated...
CVE-2025-12310
A security vulnerability has been detected in VirtFusion up to 6.0.2. This vulnerability affects unknown code of the file /account/settings of the component Email Change Handler. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be initiated...
CVE-2025-12310 VirtFusion Email Change _settings excessive authentication
A security vulnerability has been detected in VirtFusion up to 6.0.2. This vulnerability affects unknown code of the file /account/settings of the component Email Change Handler. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be initiated...
EUVD-2025-36341
A security vulnerability has been detected in VirtFusion up to 6.0.2. This vulnerability affects unknown code of the file /account/settings of the component Email Change Handler. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be initiated...
CVE-2025-12310
CVE-2025-12310 – VirtFusion : A vulnerability in VirtFusion up to 6.0.2 affects the Email Change Handler’s /account/_settings code, causing improper restriction of excessive authentication attempts (brute-force risk). Attack vector is network-based and remote; public exploit exists (PoC maturity)...
CVE-2025-12310 VirtFusion Email Change _settings excessive authentication
A security vulnerability has been detected in VirtFusion up to 6.0.2. This vulnerability affects unknown code of the file /account/settings of the component Email Change Handler. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be initiated...
PT-2025-44022
Name of the Vulnerable Software and Affected Versions VirtFusion versions through 6.0.2 Description A security issue exists in VirtFusion that relates to improper restriction of excessive authentication attempts. The issue is located within the Email Change Handler component, specifically affecti...
Exploit for Authorization Bypass Through User-Controlled Key in Themewinter Eventin
CVE-2025-4796 Eventin = 4.0.34 - Authenticated Contributo...
CVE-2025-62527
Taguette (open source qualitative research tool) before version 1.5.0 is affected by CVE-2025-62527, an issue where a password-reset flow could be exploited to deliver a malicious link that allows an attacker to set the user’s email when clicked by the victim. The root cause is tied to the passwo...
EUVD-2018-19353
Malware in sbrugna...
EUVD-2020-19338
Malware in sbrugna...
EUVD-2017-17856
Malware in sbrugna...
EUVD-2021-11804
Malware in sbrugna...
EUVD-2007-6205
Malware in sbrugna...
EUVD-2020-1416
Malware in sbrugna...
EUVD-2019-11416
Malware in sbrugna...