207 matches found
CVE-2025-11879
The GenerateBlocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getoptionrest' function in all versions up to, and including, 2.1.1. This makes it possible for authenticated attackers, with contributor level access and above, to read...
EUVD-2020-24468
Malware in sbrugna...
EUVD-2016-4052
Malware in sbrugna...
EUVD-2004-2315
Malware in sbrugna...
EUVD-2009-3019
Malware in sbrugna...
EUVD-2020-4023
Malware in sbrugna...
EUVD-2016-6626
Malware in sbrugna...
EUVD-2020-21440
Malware in sbrugna...
EUVD-2011-3652
Malware in sbrugna...
EUVD-2021-6593
Malicious code in bioql PyPI...
EUVD-2023-1418
Malicious code in bioql PyPI...
EUVD-2023-50547
Malicious code in bioql PyPI...
EUVD-2025-7055
Malicious code in bioql PyPI...
EUVD-2022-42593
Malicious code in bioql PyPI...
EUVD-2021-8856
Malicious code in bioql PyPI...
PT-2025-39833
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The credentials needed to access the device’s web server are transmitted in base64 within the HTTP headers. Base64 encoding is not a secure cipher, allowing an...
CVE-2025-6505
Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This vulnerability allows attackers to combine credentials from different sources, potentially leading to client impersonation and unauthorized access. Whe...
PT-2025-29590 · Liteon · Ic80A +1
Name of the Vulnerable Software and Affected Versions: LITEON IC48A firmware versions prior to 01.00.19r LITEON IC80A firmware versions prior to 01.01.12e Description: LITEON IC48A and IC80A EV chargers store FTP-server-access-credentials in cleartext in their system logs. Recommendations: Update...
CVE-2025-6526
CVE-2025-6526 affects 70mai M300 up to 20250611, specifically the HTTP Server component. The vulnerability arises from insufficient protection of credentials, enabling an attack that can be performed from within the local network. The documented attack complexity is high and exploitation is descr...
