CVE-2025-62506 MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS

MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege escalation vulnerability allows service accounts and STS Security Token Service accounts with restricted session policies to bypass their inline policy restrictions when performin...

CVE-2025-62506

MinIO CVE-2025-62506 is a privilege-escalation issue in which a restricted service/STS account can create a new service account for itself due to a DenyOnly short-circuit in session-policy validation. Affected versions are prior to RELEASE.2025-10-15T17-29-55Z; the attacker may gain parent-level ...

EUVD-2020-28904

Malware in sbrugna...

EUVD-2021-26750

Malware in sbrugna...

EUVD-2012-5493

Malware in sbrugna...

EUVD-2013-4131

Malware in sbrugna...

EUVD-2020-18246

Malware in sbrugna...

EUVD-2019-1906

Malware in sbrugna...

EUVD-2024-1475

Malicious code in bioql PyPI...

EUVD-2022-3480

Malicious code in bioql PyPI...

EUVD-2025-18128

Malicious code in bioql PyPI...

EUVD-2022-4412

Malicious code in bioql PyPI...

EUVD-2022-7184

Malicious code in bioql PyPI...

EUVD-2025-19216

Malicious code in bioql PyPI...

EUVD-2022-27643

Malicious code in bioql PyPI...

EUVD-2021-7539

Malicious code in bioql PyPI...

ProxyVulns

ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle url Once a victim clicks this link, evil.com will receive the cookies...

Linux Distros Unpatched Vulnerability : CVE-2018-8764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the sectoken parameter of a URI, which makes it easier for remote...

CVE-2025-4569

An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services. Refer to the 'Security Update for for MyASUS' section on the ASUS Security Advisory for more information...

CVE-2025-52477

Octo-STS is a GitHub App that acts like a Security Token Service STS for the GitHub API. Octo-STS versions before v0.5.3 are vulnerable to unauthenticated SSRF by abusing fields in OpenID Connect tokens. Malicious tokens were shown to trigger internal network requests which could reflect error lo...