555 matches found
PT-2026-29213
Stored Cross-Site Scripting XSS in Teampass versions prior to 3.1.5.16, affecting the password manager's password import functionality at the endpoint 'redacted/index.php?page=items'. The application fails to properly sanitize and encode user-input data during the import process, allowing malicio...
CVE-2020-12479
TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal...
CVE-2020-12477
The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forwarded-For client HTTP header to the getIp function...
CVE-2020-12478
TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files...
CVE-2019-12950
An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload...
EUVD-2015-7473
Malware in sbrugna...
EUVD-2021-1463
Malware in sbrugna...
EUVD-2014-3712
Malware in sbrugna...
EUVD-2015-7475
Malware in sbrugna...
EUVD-2014-3713
Malware in sbrugna...
EUVD-2021-1468
Malware in sbrugna...
EUVD-2014-3710
Malware in sbrugna...
EUVD-2014-3711
Malware in sbrugna...
EUVD-2015-7474
Malware in sbrugna...
EUVD-2012-2228
Malware in sbrugna...
EUVD-2023-2120
Malicious code in bioql PyPI...
EUVD-2022-5109
Malicious code in bioql PyPI...
EUVD-2023-1448
Malicious code in bioql PyPI...