112 matches found
CVE-2026-56843
Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only for certain lookup filters and schema validation is bypassed for legacy protocol versions. This result...
CVE-2026-56843
Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only for certain lookup filters and schema validation is bypassed for legacy protocol versions. This result...
CVE-2026-56843
Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only for certain lookup filters and schema validation is bypassed for legacy protocol versions. This result...
PT-2026-56285
Name of the Vulnerable Software and Affected Versions WebPros Plesk versions prior to 18.0.78.4 Description Incorrect authorization in the XML-RPC API allows a low-privileged authenticated customer to look up domains they do not own. This occurs because ownership is enforced only for specific...
CVE-2026-56843: Insufficiently Protected Credentials
Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only for certain lookup filters and schema validation is bypassed for legacy protocol versions. This result...
CVE-2024-41691
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of FTP credentials in plaintext within the SquashFS-root filesystem associated with the router's firmware. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary...
CVE-2025-10639
The WorkExaminer Professional server installation includes an FTP server on TCP port 12304 used for receiving client logs. A vulnerability exists due to the use of weak hardcoded credentials , allowing an attacker with network access to the port to log in and read or modify data and log files. Fu...
EUVD-1999-1216
Malware in sbrugna...
EUVD-2008-4657
Malware in sbrugna...
EUVD-2007-2027
Malware in sbrugna...
EUVD-2019-4985
Malware in sbrugna...
EUVD-2007-4638
Malware in sbrugna...
EUVD-2018-10102
Malware in sbrugna...
EUVD-2008-1090
Malware in sbrugna...
EUVD-2019-16406
Malware in sbrugna...
EUVD-2023-31814
Malicious code in bioql PyPI...
EUVD-2024-39136
Malicious code in bioql PyPI...
EUVD-2025-21723
Malicious code in bioql PyPI...