379 matches found
RockyLinux 8 : idm:DL1 (RLSA-2025:21140)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21140 advisory. python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV CVE-2025-59088 python-kdcproxy: Remote DoS via unbounded TCP upstream buffering...
RHEL 8 : idm:DL1 (RHSA-2025:21819)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21819 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and...
python-kdcproxy security update
An update is available for python-kdcproxy. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...
PT-2025-47497
Name of the Vulnerable Software and Affected Versions R.V.R Elettronica TEX firmware TEXL-000400 R.V.R Elettronica TEX Web GUI TLAN-000400 Description The R.V.R Elettronica TEX product is susceptible to a broken access control issue. This is due to insufficient authentication checks on the /...
CVE-2025-63207
The R.V.R Elettronica TEX product firmware TEXL-000400, Web GUI TLAN-000400 is vulnerable to broken access control due to improper authentication checks on the /Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting ...
CVE-2025-63207
The R.V.R Elettronica TEX FM transmitter is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. Affected versions include firmware TEXL-000400 and Web GUI TLAN-000400 . An unauthenticated attacker can send a POST request to this endpoint to mod...
CVE-2025-12849 Contest Gallery <= 28.0.2 - Missing Authorization
The Contest Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 28.0.2. This is due to the plugin registering the cgcheckwpadminuploadv10 AJAX action for both authenticated and unauthenticated users without implementing capability checks or non...
CVE-2025-41706
CVE-2025-41706 affects the Phoenix Contact webserver used in the QUINT4-UPS/24DC/24DC/10/EIP family. The issue is a denial-of-service condition that an unauthenticated remote attacker can trigger by sending a specially crafted GET request with an over-long Content-Length header. The vulnerability...
CVE-2025-41706 Phoenix Contact: Webserver Denial of Service through Malformed Content-Length
The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality...
CVE-2025-11171 Chartify – WordPress Chart Plugin <= 3.5.9 - Missing Authentication for Administrative Function
The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...
EUVD-2019-9440
Malware in sbrugna...
EUVD-2018-5267
Malware in sbrugna...
EUVD-2019-14755
Malware in sbrugna...
EUVD-2019-7954
Malware in sbrugna...
EUVD-2019-7953
Malware in sbrugna...
EUVD-2020-6068
Malware in sbrugna...
EUVD-2018-5263
Malware in sbrugna...
EUVD-2018-19753
Malware in sbrugna...