282 matches found
Security Bulletin: IBM OpenPages Vulnerable to Information Disclosure (CVE-2025-27368)
Summary Application API vulnerability that exposes metadata for configurable fields due to insufficient access control checks in IBM OpenPages has been addressed. Vulnerability Details CVEID:CVE-2025-27368 DESCRIPTION: IBM OpenPages is vulnerable to information disclosure of sensitive information...
CVE-2025-11894
The Shelf Planner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several REST API endpoints in all versions up to, and including, 2.8.1. This makes it possible for unauthenticated attackers to modify several of the plugin's settings li...
CVE-2025-11372
CVE-2025-11372 affects the LearnPress – WordPress LMS Plugin (WordPress) up to and including version 4.2.9.3. The root cause is missing capability checks on Admin Tools REST endpoints, with permission_callback set to __return_true, enabling unauthenticated attackers to perform destructive databas...
EUVD-2019-16196
Malware in sbrugna...
EUVD-2016-0355
Malware in sbrugna...
EUVD-2018-11902
Malware in sbrugna...
EUVD-2016-0408
Malware in sbrugna...
EUVD-2016-7002
Malware in sbrugna...
EUVD-2021-10133
Malware in sbrugna...
EUVD-2020-29868
Malware in sbrugna...
EUVD-2019-9390
Malware in sbrugna...
EUVD-2024-16985
Malicious code in bioql PyPI...
EUVD-2022-34797
Malicious code in bioql PyPI...
EUVD-2025-20824
Malicious code in bioql PyPI...
EUVD-2024-54455
Malicious code in bioql PyPI...
EUVD-2025-20685
Malicious code in bioql PyPI...
EUVD-2024-54330
Malicious code in bioql PyPI...
GHSA-P46V-F2X8-QP98 pREST has a Systemic SQL Injection Vulnerability
Summary pREST provides a simple way for users to expose access their database via a REST-full API. The project is implemented using the Go programming language and is designed to expose access to Postgres database tables. During an independent review of the project, Doyensec engineers found that...
CVE-2025-58459
Jenkins global-build-stats Plugin 322.v22f4db18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs...
VulnCheck KEV: CVE-2025-29925
XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, protected pages are listed when requesting the REST endpoints /rest/wikis/wikiName/pages even if the user doesn't have view rights on them. It's particularly true if the entire wiki is protected with "Prevent...