CVE-2025-41340 Missing Authorization vulnerability in CanalDenuncia.app

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'idtpdenuncia' and 'idsociedad' in '/backend/api/buscarTipoDenunciabyId.php'...

CVE-2025-41338 Missing Authorization vulnerability in CanalDenuncia.app

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'iddenuncia' and 'iduser' in '/backend/api/buscarTestigoByIdDenunciaUsuario.php'...

CVE-2025-41335

CVE-2025-41335 concerns CanalDenuncia.app and is tied to an information-disclosure vulnerability caused by missing authorization checks for parameters id and id_sociedad in the endpoint /api/buscarEmpresaById.php. Multiple connected sources (CNVD-2025-30334, RH-CVE-2025-41335, NVD/CVELIST/CNNVD e...

CVE-2025-41335 Missing Authorization vulnerability in CanalDenuncia.app

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id' and ' 'idsociedad' in '/api/buscarEmpresaById.php'...

CVE-2025-41335 Missing Authorization vulnerability in CanalDenuncia.app

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id' and ' 'idsociedad' in '/api/buscarEmpresaById.php'...

CVE-2025-11608

A security vulnerability has been detected in code-projects E-Banking System 1.0. This affects an unknown function of the file /register.php of the component POST Parameter Handler. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...

CVE-2025-11608

A security vulnerability has been detected in code-projects E-Banking System 1.0. This affects an unknown function of the file /register.php of the component POST Parameter Handler. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...

EUVD-2012-2944

Malware in sbrugna...

EUVD-2007-0963

Malware in sbrugna...

EUVD-2017-17297

Malware in sbrugna...

EUVD-2021-11249

Malware in sbrugna...

EUVD-2006-5115

Malware in sbrugna...

EUVD-2020-24204

Malware in sbrugna...

EUVD-2018-3565

Malware in sbrugna...

EUVD-2016-1400

Malware in sbrugna...

EUVD-2005-2076

Malware in sbrugna...

EUVD-2017-3041

Malware in sbrugna...

EUVD-2017-17294

Malware in sbrugna...

EUVD-2017-17290

Malware in sbrugna...

EUVD-2025-31562

Malicious code in bioql PyPI...