czarnews

CzarNews v2.1 — PHP 8.x Port A maintained fork of CzarNews...

Adobe Framemaker Integer Overflow RCE

The vulnerability of the desktop publishing system Adobe Framemaker is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Eclipse Open VSX Registry Child Process Disclosure

The vulnerability of the childprocess function in the Eclipse Open VSX Registry automatic publishing system is related to insufficient control over dynamically managed resources. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

CVE-2025-34293

GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference IDOR vulnerability via the API. Authenticated requests to the API's object endpoints allow an authenticated user to request arbitrary user IDs and receive sensitive account data for those users, including the...

CVE-2025-34293 GN4 Publishing System Insecure Direct Object Reference (IDOR) Information Disclosure

GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference IDOR vulnerability via the API. Authenticated requests to the API's object endpoints allow an authenticated user to request arbitrary user IDs and receive sensitive account data for those users, including the...

CVE-2025-34293 GN4 Publishing System Insecure Direct Object Reference (IDOR) Information Disclosure

GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference IDOR vulnerability via the API. Authenticated requests to the API's object endpoints allow an authenticated user to request arbitrary user IDs and receive sensitive account data for those users, including the...

PT-2025-43674

Name of the Vulnerable Software and Affected Versions GN4 Publishing System versions prior to 2.6 Description GN4 Publishing System contains an insecure direct object reference IDOR vulnerability via the API. Authenticated requests to the API’s object endpoints allow an authenticated user to...

CVE-2025-34293: Authorization Bypass Through User-Controlled Key

GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference IDOR vulnerability via the API. Authenticated requests to the API's object endpoints allow an authenticated user to request arbitrary user IDs and receive sensitive account data for those users, including the...

Naviga Global GN4 Publishing System security vulnerabilities

Naviga Global GN4 Publishing System is a content management and publishing system from Naviga Global, USA. A security vulnerability exists in Naviga Global GN4 Publishing System versions prior to 2.6, which stems from an insecure direct object reference in the API that could lead to account...

EUVD-2002-2197

Malware in sbrugna...

EUVD-2006-5396

Malware in sbrugna...

EUVD-2006-1367

Malware in sbrugna...

EUVD-2002-0264

Malware in sbrugna...

EUVD-2025-19382

Malicious code in bioql PyPI...

Adobe Framemaker Uninitialized Pointer Code Execution

The vulnerability of the desktop publishing system Adobe Framemaker is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Adobe Framemaker Buffer Overflow

The vulnerability of the Adobe Framemaker desktop publishing system lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Adobe Framemaker Heap Buffer Overflow RCE

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Adobe Framemaker Heap Buffer Overflow RCE

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Adobe Framemaker Integer Overflow RCE

The vulnerability of the desktop publishing system Adobe Framemaker is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2025-6705: Improper Control of Dynamically-Managed Code Resources

A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have allowed unauthorized uploads of extensions. Specifically, the system’s build scripts were executed without proper isolation, potentially exposing a privileged token. This token enabled the publishing of new...