110 matches found
CVE-2025-55462
CVE-2025-55462 ģ·Øģ½ģ ģģ½ Eramba Community ė° Enterprise Edition v3.26.0ģģ CORSCross-Origin Resource Sharing ģ¤ģ ģ¤ė„ź° ķģøėģģµėė¤. ģ ķė¦¬ģ¼ģ“ģ ģ“ /system-api/login ģėķ¬ģøķøģģ Access-Control-Allow-Origin ģėµ ķ¤ėģ ź³µź²©ģź° ģ ģ“ķė Origin ķ¤ėė„¼ ė°ģķė©“ģ ėģģ Access-Control-Allow-Credentials: trueė„¼ ģ¤ģ ķ©ėė¤. ģ“ źµ¬ģ±ģ ģ ķØķ ģź²© ģ¦ėŖ ģ“ ģ ź³µė ź²½ģ° źµģ°Ø ģ¶ģ² ...
CVE-2025-55462
A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in the Access-Control-Allow-Origin response along with Access-Control-Allow-Credentials: true. This permits malicious third-party websites to perform authenticat...
CVE-2025-55462
A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in the Access-Control-Allow-Origin response along with Access-Control-Allow-Credentials: true. This permits malicious third-party websites to perform authenticat...
CVE-2025-55462
A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in the Access-Control-Allow-Origin response along with Access-Control-Allow-Credentials: true. This permits malicious third-party websites to perform authenticat...
CVE-2025-55462: Permissive Cross-domain Policy with Untrusted Domains
A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in the Access-Control-Allow-Origin response along with Access-Control-Allow-Credentials: true. This permits malicious third-party websites to perform authenticat...
Eramba CommunityåEramba Enterprise å®å Øę¼ę“
Eramba Community and Eramba Enterprise are both a compliance management software from Eramba UK. A security vulnerability exists in Eramba Community and Eramba Enterprise version 3.26.0 that stems from a CORS misconfiguration and could lead to session hijacking and data exfiltration...
CVE-2025-55462
A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in the Access-Control-Allow-Origin response with Access-Control-Allow-Credentials: true. This enables malicious third-party websites to perform authenticated cro...
CVE-2025-55462
A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in the Access-Control-Allow-Origin response along with Access-Control-Allow-Credentials: true. This permits malicious third-party websites to perform authenticat...
CVE-2025-55462
A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in the Access-Control-Allow-Origin response along with Access-Control-Allow-Credentials: true. This permits malicious third-party websites to perform authenticat...
PT-2026-2470
A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in the Access-Control-Allow-Origin response along with Access-Control-Allow-Credentials: true. This permits malicious third-party websites to perform authenticat...
Exploit for CVE-2025-55462
CVE-2025-55462 --- Vulnerability Summary A CORS misconf...
š Eramba GRC 3.19.1 Command Injection
Eramba GRC platform version 3.19.1 proof of concept command injection exploit. ============================================================================================================================================= | Title : Eramba GRC platform 3.19.1 Command injection in download-test-pdf...
EUVD-2020-17796
Malware in sbrugna...
EUVD-2018-19708
Malware in sbrugna...
EUVD-2020-20522
Malware in sbrugna...
EUVD-2018-19606
Malware in sbrugna...
EUVD-2018-19456
Malware in sbrugna...
EUVD-2018-19709
Malware in sbrugna...