19792 matches found
CVE-2025-47348
CVE-2025-47348 is a memory corruption vulnerability in Qualcomm chipsets related to identity credential processing in the trusted application. The issue is described as memory corruption during identity credential operations. CVSS v3.1 metrics indicate a HIGH base score (7.8) with local attack ve...
CVE-2025-14996
The AS Password Field In Default Registration Form plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.0.0. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it...
Malicious Package
Overview ing-feat-auth-idin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
SUSE CVE-2025-13352
Mattermost versions 10.11.x = 10.11.6 and Mattermost GitHub plugin versions =2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack the GitHub reaction feature to make users add reactions to arbitrary GitHub objects via crafted notification posts...
SUSE CVE-2025-65797
Incorrect access control in the Identity Provider service of usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete registered identity providers, leading to an account takeover or Denial of Service DoS...
PT-2026-1538
Name of the Vulnerable Software and Affected Versions versions prior to 2.3 Description A memory corruption issue exists when handling identity credential operations within the trusted application. The issue can be triggered by specific operations related to identity credentials. Recommendations ...
Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access Vulnerability Details CVEID:CVE-2024-12243 DESCRIPTION: A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1,...
EulerOS Virtualization 2.10.0 : libxml2 (EulerOS-SA-2026-1001)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.CVE-2025-27113 libxml2...
EUVD-2026-0737
Malicious code in identity-emitter npm...
MAL-2026-17 Malicious code in identity-emitter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e21ae9a5babde61e78ed9c713ec2e845a44ac55b19fb0d9cd48561159bb16a The package identity-emitter was found to contain malicious code...
Malicious code in identity-emitter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e21ae9a5babde61e78ed9c713ec2e845a44ac55b19fb0d9cd48561159bb16a The package identity-emitter was found to contain malicious code...
VulnCheck KEV: CVE-2025-14998
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.24. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to...
WordPress plugin Branda has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
CVE-2025-13820: Undefined Security Weakness
The Comments WordPress plugin before 7.6.40 does not properly validate user's identity when using the disqus.com provider, allowing an attacker to log in to any user when knowing their email address when such user does not have an account on disqus.com yet...
PT-2026-3233
Name of the Vulnerable Software and Affected Versions OpenStack affected versions not specified Description An issue exists in OpenStack’s keystonemiddleware component that could allow for privilege escalation or impersonation. An authenticated attacker may be able to elevate their privileges or...
In 2025, age checks started locking people out of the internet
If 2024 was the year lawmakers talked about online age verification, 2025 was the year they actually flipped the switch. In 2025, across parts of Europe and the US, age checks for certain websites especially pornography turned long‑running child‑protection debates into real‑world access controls...
KYC Solutions Security Bypass
The vulnerability of KYC Solutions’ software for customer identity verification is related to the implementation of security features at the client side. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
KYC Solutions OTP Unauthorized Access
The vulnerability of the software implementation for the KYC Solutions’ customer identity verification mechanism is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to user...
KYC Solutions Software Unencrypted Credentials
The vulnerability of KYC Solutions’ software for customer identity verification is related to the transmission of user credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to users’ account information...
KYC Solutions Disclosure Information
The vulnerability of KYC Solutions’ software for customer identity verification is related to the disclosure of information in debugging messages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...