654 matches found
CVE-2025-67796: Improper Access Control
IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users...
Rdiffweb Access Control Vulnerability
Rdiffweb is a web application personally developed by Patrik Dufresne from the United States. It allows for quick access to your files through an efficient web interface. Versions of Rdiffweb prior to 2.10.5 contained a security vulnerability related to access control. This vulnerability stemmed...
CVE-2025-67796
IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users...
CVE-2025-67796
IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users...
EUVD-2007-2739
Malware in sbrugna...
EUVD-2022-0264
Malicious code in bioql PyPI...
EUVD-2022-0265
Malicious code in bioql PyPI...
EUVD-2022-0252
Malicious code in bioql PyPI...
EUVD-2022-0256
Malicious code in bioql PyPI...
EUVD-2022-0257
Malicious code in bioql PyPI...
EUVD-2022-0259
Malicious code in bioql PyPI...
EUVD-2022-0260
Malicious code in bioql PyPI...
EUVD-2022-0261
Malicious code in bioql PyPI...
EUVD-2022-0254
Malicious code in bioql PyPI...
EUVD-2022-0232
Malicious code in bioql PyPI...
EUVD-2022-0251
Malicious code in bioql PyPI...
EUVD-2022-0267
Malicious code in bioql PyPI...
EUVD-2022-0236
Malicious code in bioql PyPI...