CVE-2026-93582

The HTTP Basic Authentication modules in OTRS Community Edition 6 and prior accept the authenticated username from either the REMOTEUSER or HTTPREMOTEUSER environment variable. In CGI and modperl based deployments, HTTP request headers may be mapped to corresponding HTTP environment variables. As...

EUVD-2026-97258

The HTTP Basic Authentication modules in OTRS Community Edition 6 and prior accept the authenticated username from either the REMOTEUSER or HTTPREMOTEUSER environment variable. In CGI and modperl based deployments, HTTP request headers may be mapped to corresponding HTTP environment variables. As...

CVE-2026-12101

The IBM Verify Identity Access and IBM Security Verify Access products are affected by CVE-2026-12101. The vulnerability allows an administrator to execute additional commands they are not entitled to due to the improper validation of user-supplied requests . This issue could result in unauthoriz...

CVE-2026-63102

rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated users to assign arbitrary roles to any account by submitting an unvalidated role field through the Users API during user creation or profile updates. Attackers can exploit the missing allowlist...

CVE-2026-42167: Improper Neutralization of Special Elements used in an SQL Command

modsql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands e.g., COPY TO PROGRAM...

PT-2026-30637

Memory corruption while processing a frame request from user...

EUVD-2020-26159

Malware in sbrugna...

EUVD-2017-4242

Malware in sbrugna...

EUVD-2021-1340

Malware in sbrugna...

EUVD-2017-1426

Malware in sbrugna...

EUVD-2020-12588

Malware in sbrugna...

EUVD-2020-21250

Malware in sbrugna...

EUVD-2025-19227

Malicious code in bioql PyPI...

EUVD-2024-1124

Malicious code in bioql PyPI...

EUVD-2022-42880

Malicious code in bioql PyPI...

Race condition in privilege cache invalidation cycle

Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior ...

CVE-2012-6273

SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU aka search user request...

CVE-2000-1237

The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing...

Synapse denial of service through media disk space consumption

Impact Synapse versions before 1.106 are vulnerable to a disk fill attack, where an unauthenticated adversary can induce Synapse to download and cache large amounts of remote media. The default rate limit strategy is insufficient to mitigate this. This can lead to a denial of service, ranging fro...

MGASA-2024-0328 Updated php packages fix security vulnerabilities

HTTPREDIRECTSTATUS might be controlled via user request FPM log output might be modified by an attacker HTTP POST can be modified by an attacker For other bug fixes consult references...