CVE-2026-105306: Missing Authorization

A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issue occurs because the registration process fails to filter security-sensitive client attributes when a new client is created. An attacker with a valid Initial Access Token can...

EUVD-2009-2262

Malware in sbrugna...

EUVD-2024-50027

Malicious code in bioql PyPI...

EUVD-2024-16116

Malicious code in bioql PyPI...

EUVD-2024-49204

Malicious code in bioql PyPI...

EUVD-2024-34573

Malicious code in bioql PyPI...

EUVD-2024-46631

Malicious code in bioql PyPI...

EUVD-2024-43977

Malicious code in bioql PyPI...

EUVD-2024-49206

Malicious code in bioql PyPI...

EUVD-2024-16347

Malicious code in bioql PyPI...

EUVD-2024-49394

Malicious code in bioql PyPI...

EUVD-2024-46627

Malicious code in bioql PyPI...

EUVD-2024-16113

Malicious code in bioql PyPI...

EUVD-2024-49205

Malicious code in bioql PyPI...

EUVD-2024-43978

Malicious code in bioql PyPI...

EUVD-2024-46637

Malicious code in bioql PyPI...

Citrix Director - Incorrect applied policy result shown on the session detail page

Set a policy that contains computer policies and user policies and assign the policy to be enabled only when accessing via Gateway. However the policy name is shown on applied policy of session detail page when the session is an internal one that not via the Gateway...

CVE-2024-10288

Cross-Site Scripting XSS vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/SubscribeToList, parameter ListName...

CVE-2024-10287

Cross-Site Scripting XSS vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ForgotPassword, parameter ListName...

CVE-2024-10286

Cross-Site Scripting XSS vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to...