EUVD-2016-6897

Malware in sbrugna...

EUVD-2016-6905

Malware in sbrugna...

EUVD-2018-12204

Malware in sbrugna...

EUVD-2018-12219

Malware in sbrugna...

EUVD-2016-6894

Malware in sbrugna...

EUVD-2016-6898

Malware in sbrugna...

EUVD-2024-49736

Malicious code in bioql PyPI...

Privilege Escalation

github.com/openbao/openbao is vulnerable to Privilege Escalation. The vulnerability is due to accounts with access to privileged identity entity systems in root namespaces being able to escalate privileges to the global root policy...

CVE-2025-54996

CVE-2025-54996 — OpenBao root namespace privilege escalation. OpenBao versions 2.3.1 and earlier allow accounts with access to highly-privileged identity entity systems in the root namespace to directly elevate scope to the root policy. The identity system can add policies that grant capabilities...

CVE-2025-54996

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, accounts with access to highly-privileged identity entity systems in root namespaces were able to increase their scope directly to...

CVE-2024-9110

A medium severity vulnerability has been identified within Privileged Identity which can allow an attacker to perform reflected cross-site scripting attacks...

CVE-2024-9110

A medium severity vulnerability has been identified within Privileged Identity which can allow an attacker to perform reflected cross-site scripting attacks...

CVE-2024-9110 Cross-Site Scripting In Privileged Identity

A medium severity vulnerability has been identified within Privileged Identity which can allow an attacker to perform reflected cross-site scripting attacks...

CVE-2024-9110 Cross-Site Scripting In Privileged Identity

A medium severity vulnerability has been identified within Privileged Identity which can allow an attacker to perform reflected cross-site scripting attacks...

CVE-2024-9110

CVE-2024-9110 refers to a medium-severity cross-site scripting vulnerability in BeyondTrust’s Privileged Identity. Public sources converge on an issue that allows a reflected XSS attack, with the affected product described as Privileged Identity and the scope tied to versions prior to 7.4.2 (per ...

PT-2024-39437 · Unknown · Privileged Identity

Name of the Vulnerable Software and Affected Versions: Privileged Identity affected versions not specified Description: A medium severity issue has been identified within Privileged Identity, allowing an attacker to perform reflected cross-site scripting attacks. Recommendations: At the moment,...

How Microsoft and Sonrai integrate to eliminate attack paths

Cloud development challenges conventional thinking about risk. A “perimeter” was always the abstraction that security teams could start from—defining their perimeter and exposing the cracks in firewalls and network access. With more and more infrastructure represented as ephemeral code, protectin...

Security Bulletin: IBM Security Privileged Identity Manager NOT Affected by CVE-2021-44228 Exploit

Summary IBM Security Privileged Identity Manager NOT Affected by CVE-2021-44228 Exploit. Vulnerability Details After conducting extensive research on product code base, it is determined that all versions of IBM Security Privileged Identity Manager are not vulnerable to Java library Apache log4j v...

Security Bulletin: IBM Security Privileged Identity Manager is affected by WebSphere Application Server is vulnerable to a directory traversal vulnerability

Summary IBM Security Privileged Identity Manager has addressed a WebSphere Application Server is vulnerable to a directory traversal vulnerability. Vulnerability Details CVEID: CVE-2021-20354 DESCRIPTION: IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse...

Security Bulletin: IBM Security Privileged Identity Manager is affected by CVE-2020-2773 (deferred from Oracle Apr 2020 CPU)

Summary IBM Security Privileged Identity Manager has addressed aCVE-2020-2773 deferred from Oracle Apr 2020 CPU Vulnerability Details CVEID: CVE-2020-2773 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Security component could allow an unauthenticated attacker to caus...