731 matches found
CVE-2025-59043
OpenBao is an open source identity-based secrets management system. In OpenBao versions prior to 2.4.1, JSON objects after decoding may use significantly more memory than their serialized version. It is possible to craft a JSON payload to maximize the factor between serialized memory usage and...
GHSA-99H5-PJCV-GR6V Better Auth: Unauthenticated API key creation through api-key plugin
Summary A critical authentication bypass was identified in the API key creation and update endpoints. An attacker could create or modify API keys for arbitrary users by supplying a victim’s user ID in the request body. Due to a flaw in how the authenticated user was derived, the endpoints could...
EUVD-2021-10102
Malware in sbrugna...
EUVD-2021-12011
Malware in sbrugna...
EUVD-2021-26377
Malware in sbrugna...
EUVD-2015-9171
Malware in sbrugna...
EUVD-2020-25820
Malware in sbrugna...
EUVD-2019-6606
Malware in sbrugna...
EUVD-2018-18284
Malware in sbrugna...
EUVD-2011-0010
Malware in sbrugna...
EUVD-2017-7437
Malware in sbrugna...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the http server port. An attacker can retrieve sensitive integration data, such as email addresses, by sending unauthenticated requests to the listening port on localhost. Note: This is only exploitable if th...
EUVD-2023-44755
Malicious code in bioql PyPI...
EUVD-2025-31819
Malicious code in bioql PyPI...
EUVD-2025-23257
Malicious code in bioql PyPI...
EUVD-2023-3128
Malicious code in bioql PyPI...
EUVD-2022-48306
Malicious code in bioql PyPI...
EUVD-2023-24267
Malicious code in bioql PyPI...
EUVD-2025-20870
Malicious code in bioql PyPI...
Information Exposure
Overview github.com/canonical/lxd is an a modern, secure and powerful system container and virtual machine manager. Affected versions of this package are vulnerable to Information Exposure via differing HTTP status code responses in the images endpoint's AllowUntrusted API. An attacker can...