Frontier Airlines Website 安全漏洞

Frontier Airlines Website is a Web site of Frontier Airlines USA, Inc. A security vulnerability exists in Frontier Airlines Website that originates from an unauthenticated endpoint that publicly verifies an e-mail address, which could allow an unauthenticated remote attacker to obtain a valid...

Tibbo AggreGate Network Manager 安全漏洞

Tibbo AggreGate Network Manager is a network monitoring and IT management platform from Tibbo. A security vulnerability exists in Tibbo AggreGate Network Manager versions prior to 6.40.05, which originates from an unauthenticated endpoint /cwmp/happyaxis.jsp that exposes sensitive system...

CVE-2025-9152

An improper privilege management vulnerability exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR endpoint. A malicious user can exploit this flaw to generate access tokens with elevated privileges,...

CVE-2025-9152 Improper Privilege Management in Multiple WSO2 API Manager via keymanager-operations DCR Endpoint

An improper privilege management vulnerability exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR endpoint. A malicious user can exploit this flaw to generate access tokens with elevated privileges,...

Exploit for CVE-2025-10353

CVE-2025-10352 - Admin Account Creation PoC 🛠️ Exploit for C...

Exploit for CVE-2025-10352

CVE-2025-10352 - Admin Account Creation PoC 🛠️ Exploit for C...

EUVD-2025-11517

Malicious code in bioql PyPI...

EUVD-2025-6003

Malicious code in bioql PyPI...

EUVD-2022-32379

Malicious code in bioql PyPI...

EUVD-2022-32385

Malicious code in bioql PyPI...

EUVD-2022-32380

Malicious code in bioql PyPI...

EUVD-2025-1661

Malicious code in bioql PyPI...

TRUFusion Entreprise Sensitive Data Exposure

TRUFusion Entreprise is a solution to easily and securely manage the exchange of CAD files and related product design data from within your PLM system. Due to a lack of control, it is possible for an unauthenticated attacker to access an endpoint that returns all partners who have access to the...

OpenSupports 安全漏洞

OpenSupports is a simple open source ticketing platform from OpenSupports Open Source. A security vulnerability exists in OpenSupports version 4.11.0 that originates from an unauthenticated diagnostic endpoint that allows arbitrary back-end network connections, potentially leading to a server-sid...

Vasion Print Virtual Appliance Host 安全漏洞

Vasion Print Virtual Appliance Host is a print management software from Vasion USA. A security vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 25.1.102, which stems from a failure to authenticate the /api-gateway/identity/search-groups endpoint, which could allow a...

ThriveX-Blog 安全漏洞

ThriveX-Blog is a blog management system by the individual developer LiuYuYang01. A security vulnerability exists in ThriveX-Blog versions 2.5.9 through 3.1.3, which originates from the unauthenticated /api/assistant/list endpoint and could lead to the disclosure of sensitive information...

CVE-2025-58366 Onyxia private helm repository credentials are leaked through unauthenticated API

Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public unauthenticated /public/catalogs endpoint.vOnly instances using private helm repositories i.e setting username & password in the...

CVE-2025-34163

Dongsheng Logistics Software is affected by CVE-2025-34163 due to an unauthenticated endpoint at /CommMng/Print/UploadMailFile that does not validate file types or enforce proper access control. A crafted multipart/form-data POST enables uploading arbitrary files, including executable scripts suc...

CVE-2025-34163

Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST reques...

PT-2025-34945

Name of the Vulnerable Software and Affected Versions: Dongsheng Logistics Software affected versions not specified Description: Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that does not enforce proper file type validation and access control. ...