7150 matches found
CVE-2025-6126
A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /contact.php. The manipulation of the argument Name leads to cross site scripting. The attack can be launched...
Salt's on demand pillar functionality vulnerable to arbitrary command injections
An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary command to be run on the master with the same privileges as the master process...
GHSA-J6G5-P62X-58HW vantage6 lacks brute-force protection on change password functionality
Impact If attacker gets access to an authenticated session, they can try to brute-force the user password by using the change password functionality: they can call that route infinitely which will return the message that password is wrong until it is correct Patches This issue has been patched in...
CVE-2025-43863
vantage6 contains a brute-force vulnerability in the change password flow when an attacker has an authenticated session. The issue arises from unlimited password-change attempts via the route, enabling password-guessing and account compromise. Multiple sources (CVEs, advisories, and vendor notes)...
GHSA-48WX-8736-JGX2 Drupal Commerce Alphabank Redirect Incorrect Authorization vulnerability
Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse. This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3...
GHSA-Q9H3-R6WR-P3J3 Drupal Commerce Eurobank (Redirect) Incorrect Authorization vulnerability
Incorrect Authorization vulnerability in Drupal Commerce Eurobank Redirect allows Functionality Misuse. This issue affects Commerce Eurobank Redirect: from 0.0.0 before 2.1.1...
Drupal Commerce Eurobank (Redirect) Incorrect Authorization vulnerability
Incorrect Authorization vulnerability in Drupal Commerce Eurobank Redirect allows Functionality Misuse. This issue affects Commerce Eurobank Redirect: from 0.0.0 before 2.1.1...
Drupal Commerce Alphabank Redirect Incorrect Authorization vulnerability
Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse. This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3...
CVE-2025-48445
Incorrect Authorization vulnerability in Drupal Commerce Eurobank Redirect allows Functionality Misuse.This issue affects Commerce Eurobank Redirect: from 0.0.0 before 2.1.1...
CVE-2025-48446
Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse.This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3...
CVE-2025-48446 Commerce Alphabank Redirect - Moderately critical - Access bypass - SA-CONTRIB-2025-067
Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse.This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3...
CVE-2025-48446
The Drupal Commerce Alphabank Redirect module is vulnerable to an Incorrect Authorization flaw in versions 0.0.0 through 1.0.2 . The root cause is that the module fails to sufficiently verify the payment status on canceled orders, which can allow an attacker to issue a specially crafted request t...
CVE-2025-48446 Commerce Alphabank Redirect - Moderately critical - Access bypass - SA-CONTRIB-2025-067
Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse.This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3...
CVE-2025-48446 Commerce Alphabank Redirect - Moderately critical - Access bypass - SA-CONTRIB-2025-067
Incorrect Authorization vulnerability in Drupal Commerce Alphabank Redirect allows Functionality Misuse.This issue affects Commerce Alphabank Redirect: from 0.0.0 before 1.0.3...
CVE-2025-48445 Commerce Eurobank (Redirect) - Moderately critical - Access bypass - SA-CONTRIB-2025-066
Incorrect Authorization vulnerability in Drupal Commerce Eurobank Redirect allows Functionality Misuse.This issue affects Commerce Eurobank Redirect: from 0.0.0 before 2.1.1...
CVE-2025-48445
The Drupal Commerce Eurobank (Redirect) module is vulnerable to an Incorrect Authorization flaw (Access bypass) in versions prior to 2.1.1 . The root cause is that the module fails to sufficiently verify the payment status on canceled orders , allowing an attacker to submit a specially crafted re...
CVE-2025-48445 Commerce Eurobank (Redirect) - Moderately critical - Access bypass - SA-CONTRIB-2025-066
Incorrect Authorization vulnerability in Drupal Commerce Eurobank Redirect allows Functionality Misuse.This issue affects Commerce Eurobank Redirect: from 0.0.0 before 2.1.1...
CVE-2025-48445 Commerce Eurobank (Redirect) - Moderately critical - Access bypass - SA-CONTRIB-2025-066
Incorrect Authorization vulnerability in Drupal Commerce Eurobank Redirect allows Functionality Misuse.This issue affects Commerce Eurobank Redirect: from 0.0.0 before 2.1.1...
[SECURITY] Fedora 42 Update: qt6-qtscxml-6.9.1-1.fc42
The Qt SCXML module provides functionality to create state machines from SCXM L files. This includes both dynamically creating state machines loading the SCXML file and instantiating states and transitions and generating a C++ file that has a class implementing the state machine. It also contains...