110 matches found
CVE-2025-10149
The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including...
CVE-2025-10149 Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover
The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including...
EUVD-2025-211118
The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including...
CVE-2025-10149
Multiple WSO2 products are vulnerable to arbitrary operations via SCIM 1.1 or 2.0 endpoints due to insufficient authorization validation for federated users. When a federated user and a local user share the same username, the federated user can perform actions intended for the local account, pote...
CVE-2025-10149: Improper Preservation of Permissions
The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including...
PT-2026-117486
Name of the Vulnerable Software and Affected Versions WSO2 Identity Server affected versions not specified Description An authorization flaw exists in the SCIM 2.0 and SCIM 1.1 endpoints where the system fails to sufficiently validate authorization for federated users interacting with the local...
CVE-2026-53547: Missing Authorization
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /database/export endpoint creates a user export that includes the global settings table even though the rest of the export is user-scoped. The settings table...
PT-2026-35310
Summary MarkdownBody, the shared component used to render every Markdown surface in the Paperclip UI issue documents, issue comments, chat threads, approvals, agent details, export previews, etc., passes urlTransform=url = url to react-markdown. That override replaces react-markdown's built-in...
EUVD-2021-12807
Malware in sbrugna...
EUVD-2018-11788
Malware in sbrugna...
EUVD-2019-3013
Malware in sbrugna...
EUVD-2020-7920
Malware in sbrugna...
EUVD-2021-2414
Malware in sbrugna...
EUVD-2018-2011
Malware in sbrugna...
EUVD-2025-14949
Malicious code in bioql PyPI...
EUVD-2023-50665
Malicious code in bioql PyPI...
EUVD-2022-2228
Malicious code in bioql PyPI...
EUVD-2024-2144
Malicious code in bioql PyPI...