1715 matches found
EUVD-2025-34920
The Restaurant Brands International RBI assistant platform through 2025-09-06 has an "Anyone Can Join This Party" signup API that does not verify user account creation, allowing a remote unauthenticated attacker to create a user account...
Restaurant Brands International assistant platform 安全漏洞
Restaurant Brands International assistant platform is a restaurant back office platform from Restaurant Brands International. A security vulnerability exists in Restaurant Brands International assistant platform version 2025-09-06 and earlier, which stems from a dependency on client authenticatio...
CVE-2025-62647
The Restaurant Brands International RBI assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be used to call an API to return a signed AWS upload URL, for any store's path...
CVE-2025-62646
CVE-2025-62646 affects the Restaurant Brands International assistant platform (through 2025-09-06). Multiple sources describe a vulnerability allowing a remote attacker to review stored audio of conversations between Drive Thru staff and customers. The root cause details are not explicitly provid...
EUVD-2025-34922
The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnostic screen...
CVE-2025-62642
The Restaurant Brands International RBI assistant platform through 2025-09-06 has an "Anyone Can Join This Party" signup API that does not verify user account creation, allowing a remote unauthenticated attacker to create a user account...
Restaurant Brands International assistant platform 安全漏洞
Restaurant Brands International assistant platform is a restaurant back office platform from Restaurant Brands International. A security vulnerability exists in Restaurant Brands International assistant platform version 2025-09-06 and earlier, which stems from returning JWTs that can be used to...
CVE-2025-62649
The RBI assistant platform (through 2025-09-06) relies on client-side authentication for submission of equipment orders, per CVE-2025-62649 and related CSAF/VIs. The connected ics/CSAF entries describe multiple issues, including: a remote unauthenticated attacker being able to create an account v...
EUVD-2025-34923
The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders...
CVE-2025-62649
The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders...
CVE-2025-62651
The Restaurant Brands International RBI assistant platform through 2025-09-06 does not implement access control for the bathroom rating interface...
EUVD-2020-22939
Malware in sbrugna...
EUVD-2019-8186
Malware in sbrugna...
EUVD-2020-24028
Malware in sbrugna...
EUVD-2019-6759
Malware in sbrugna...
EUVD-2020-21376
Malware in sbrugna...
EUVD-2020-24026
Malware in sbrugna...
EUVD-2020-24027
Malware in sbrugna...