336 matches found
CVE-2026-23996 FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detection
FastAPI Api Key provides a backend-agnostic library that provides an API key system. Version 1.1.0 has a timing side-channel vulnerability in verifykey. The method applied a random delay only on verification failures, allowing an attacker to statistically distinguish valid from invalid API keys b...
CVE-2021-22148
Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user gaining access to unauthorized engines...
CVE-2023-25804
Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a limited path traversal vulnerability. An SSH key can be saved into an unintended location, for example the /tmp folder using a payload ../../../../../tmp/test111dev. This issue...
PT-2025-50939
In Apache StreamPark versions 2.0.0 through 2.1.7, a security vulnerability involving a hard-coded encryption key exists. This vulnerability occurs because the system uses a fixed, immutable key for encryption instead of dynamically generating or securely configuring the key. Attackers may obtain...
EUVD-2025-198494
In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key PKESK packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using public-key encryption in this release...
PT-2025-47788
Name of the Vulnerable Software and Affected Versions RNP version 0.18.0 Description A regression in RNP version 0.18.0 causes the symmetric session key used for Public-Key Encrypted Session Key PKESK packets to remain uninitialized, resulting in it always being an all-zero byte array. This allow...
PT-2025-43213
Name of the Vulnerable Software and Affected Versions favethemes Houzez versions through 4.1.1 Description An authorization bypass exists due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. Recommendations Update to a version later...
EUVD-2021-20471
Malware in sbrugna...
EUVD-2018-2038
Malware in sbrugna...
EUVD-2020-0607
Malware in sbrugna...
EUVD-2013-6640
Malware in sbrugna...
EUVD-2019-0811
Malware in sbrugna...
EUVD-2021-19366
Malware in sbrugna...
EUVD-2017-16579
Malware in sbrugna...
EUVD-2006-4328
Malware in sbrugna...
EUVD-2016-0179
Malware in sbrugna...
EUVD-2020-19704
Malware in sbrugna...
EUVD-2019-17018
Malware in sbrugna...