20112 matches found
MantisBT 安全漏洞
MantisBT is a Web-based open source defect tracking system from the MantisBT team. The system provides project management and defect tracking services in a web-operated format. A security vulnerability exists in MantisBT version 2.27.1 and prior versions, which stems from a failure to verify...
Improper Authorization
Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Improper Authorization due to insufficient access-level checks in the manageconfigcolumnspage.php. An attacker can retrieve configuration details from private projects by using the 'Copy From'...
EUVD-2025-37521
MantisBT unauthorized disclosure of private project column configuration...
MantisBT unauthorized disclosure of private project column configuration
Impact Due to insufficient access-level checks, any non-admin user having access to manageconfigcolumnspage.php typically project managers having MANAGER role can use the Copy From action to retrieve the columns configuration from a private project they have no access to. Access to the reverse...
EUVD-2025-37522
MantisBT lacks verification when changing a user's email address...
MantisBT Vulnerable to Denial-of-Service (DoS) via Excessive Note Length
A lack of server-side validation for note length in MantisBT allows attackers to permanently corrupt issue activity logs by submitting extremely long notes tested with 4,788,761 characters. Once such a note is added: Impact - The entire activity stream becomes unviewable UI fails to render. - New...
PT-2025-44804
Name of the Vulnerable Software and Affected Versions Mantis Bug Tracker versions 2.27.1 and below Description Mantis Bug Tracker is an open source issue tracker. When a user modifies their profile to update their email address, the system saves the change without verifying ownership. This can le...
EUVD-2002-1099
Malware in sbrugna...
EUVD-2002-1104
Malware in sbrugna...
EUVD-2005-3335
Malware in sbrugna...
EUVD-2006-1578
Malware in sbrugna...
EUVD-2006-6557
Malware in sbrugna...
EUVD-2005-2557
Malware in sbrugna...
EUVD-2008-3320
Malware in sbrugna...
EUVD-2013-1882
Malware in sbrugna...
EUVD-2005-4514
Malware in sbrugna...
EUVD-2005-4515
Malware in sbrugna...
EUVD-2005-3091
Malware in sbrugna...