2473 matches found
CVE-2025-64061: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Primakon Pi Portal 1.0.18 /api/v2/users endpoint is vulnerable to unauthorized data exposure due to deficient access control mechanisms. Any authenticated user, regardless of their privilege level including standard or low-privileged users, can make a GET request to this endpoint and retrieve a...
Primakon Pi Portal 安全漏洞
Primakon Pi Portal is a project, contract management platform from Primakon Croatia. A security vulnerability exists in Primakon Pi Portal version 1.0.18, which stems from a lack of authorization checking in the /api/v2/user/register endpoint, which could lead to unauthorized user registration...
CVE-2025-64066: Improper Access Control
Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access Control vulnerability. The endpoint fails to implement any authorization checks, allowing unauthenticated attackers to perform POST requests to register new user accounts in the application's local database...
CVE-2025-64066
Primakon Pi Portal version 1.0.18 contains a Broken Access Control vulnerability in the REST /api/v2/user/register endpoint. The root cause is a lack of authorization checks, which allows unauthenticated attackers to perform POST requests to register new user accounts directly into the applicatio...
PT-2025-48065
The Primakon Pi Portal 1.0.18 /api/V2/pp users?email endpoint is used for user data filtering but lacks proper server-side validation against the authenticated session. By manipulating the email parameter to an arbitrary value e.g., [email protected], an attacker can assume the session and gain...
Primakon Pi Portal 安全漏洞
Primakon Pi Portal is a project, contract management platform from Primakon Croatia. A security vulnerability exists in Primakon Pi Portal version 1.0.18, which stems from insufficient authorization checking of API endpoints and could lead to unauthorized data manipulation and elevation of...
CVE-2025-64064
The Primakon Pi Portal version 1.0.18 contains a privilege escalation vulnerability in the /api/v2/pp_users endpoint. Due to weak access controls , the system fails to adequately verify user permissions when processing a PATCH request intended to modify the PP_SECURITY_PROFILE_ID . An attacker wi...
USN-7887-1: Linux kernel (Raspberry Pi Real-time) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; -...
Vulnerabilites
Vendor Acknowledgment & Coordination...
EUVD-2025-175662
Malicious code in warn-pi-visualize-catch-slow npm...
EUVD-2025-177184
Malicious code in pi-authenticate-cold-encrypt-alert npm...
EUVD-2025-180455
Malicious code in alpha-integer-pi-assert-export npm...
Malicious code in module-user-signal-pi-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d003271974b574c499702318624e2822ce8f7a3dd2b20b53a8f6f81032634f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175782
Malicious code in upsilon-fork-pi-index-emulate npm...
EUVD-2025-179091
Malicious code in epsilon-execute-pi-interpret-index npm...
MAL-2025-185433 Malicious code in alpha-integer-pi-assert-export (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a34951bfb26b2bf73403b5a41d1b38d6088c5a6558b84230cd7bb1e901125fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180176
Malicious code in awk-mock-rain-enum-pi npm...
EUVD-2025-180456
Malicious code in alpha-deserialize-book-upsilon-pi npm...