575 matches found
CVE-2025-62176 Mastadon streaming server allows OAuth clients without the `read` scope to subscribe to public channels
Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, the streaming server accepts serving events for public timelines to clients using any valid authentication token, even if those tokens lack the read:statuses scope. This allow...
GHSA-77R9-W39M-9XH5 Omni vulnerable to information leak via API
Impact Omni might leak sensitive information via an API. Patches v1.1.5, v1.0.2 and v1.2.0 contain the patch. Workarounds None. References None...
Zimbra Collaboration Server 9.x < 9.0.0 Patch 39, 10.0.x < 10.0.13, 10.1.x < 10.1.5 XSS
According to its self-reported version number, Zimbra Collaboration Server is affected by the following vulnerability including:A stored cross-site scripting XSS vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML. Using a specifically crafted email, a attacker...
EUVD-2021-1090
Malware in sbrugna...
EUVD-2021-2137
Malware in sbrugna...
EUVD-2021-0829
Malware in sbrugna...
EUVD-2020-0208
Malware in sbrugna...
EUVD-2016-10275
Malware in sbrugna...
EUVD-2023-40424
Malicious code in bioql PyPI...
EUVD-2024-36469
Malicious code in bioql PyPI...
EUVD-2023-36925
Malicious code in bioql PyPI...
EUVD-2023-27719
Malicious code in bioql PyPI...
EUVD-2022-1438
Malicious code in bioql PyPI...
EUVD-2025-7224
Malicious code in bioql PyPI...
EUVD-2025-12749
Malicious code in bioql PyPI...
EUVD-2022-6988
Malicious code in bioql PyPI...
EUVD-2024-1797
Malicious code in bioql PyPI...
EUVD-2023-1742
Malicious code in bioql PyPI...