687 matches found
CVE-2025-10732
The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.12.1. This is due to improper access control implementation on the '/wp-json/sureforms/v1/srfm-global-settings' REST API endpoint...
F5 BIG-IP security vulnerabilities
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. An elevation of privilege vulnerability exists in the BIG-IP's iControl REST and TMOS Shell tmsh modules. The vulnerability...
RestAPI Interface Unauthorized Access
The vulnerability of the RestAPI interface of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform,...
XWiki Platform REST API Code Execution
The vulnerability of the REST API implementation of the XWiki Platform’s collaborative web application creation platform is related to the lack of measures taken to protect the SQL query structure during the processing of the orderField parameter. Exploiting this vulnerability allows a malicious...
CVE-2025-43727
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an incorrect Implementation of Authentication Algorithm...
EUVD-2018-11731
Malware in sbrugna...
EUVD-2013-1544
Malware in sbrugna...
EUVD-2016-2423
Malware in sbrugna...
EUVD-2016-2422
Malware in sbrugna...
EUVD-2016-2421
Malware in sbrugna...
EUVD-2020-28421
Malware in sbrugna...
EUVD-2020-27097
Malware in sbrugna...
EUVD-2017-16527
Malware in sbrugna...
EUVD-2018-0577
Malware in sbrugna...
EUVD-2019-1074
Malware in sbrugna...
EUVD-2014-6402
Malware in sbrugna...
CVE-2025-9209
The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...
EUVD-2023-27545
Malicious code in bioql PyPI...