523 matches found
CVE-2025-41343 Missing Authorization vulnerability in CanalDenuncia.app
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameter 'email' in '/backend/api/users/searchUserByEmail.php'...
CVE-2025-6574
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and excluding, 6.1. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for...
PT-2025-44666
Name of the Vulnerable Software and Affected Versions ELOG affected versions not specified Description The ELOG platform, an electronic logbook system, has an issue where an authenticated attacker with low privileges can modify another user's profile. Specifically, an attacker can alter a target...
GHSA-CW79-FQ4F-9R96 Liferay Portal Vulnerable to Information Exposure Through a Log File Vulnerability in LDAP Import Feature
Information exposure through log file vulnerability in LDAP import feature in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows local users t...
Command Injection
@anthropic-ai/claude-code is vulnerable to Command Injection. The vulnerability is due to the application executing a command templated with git config user.email at startup without validating or sanitizing the input, which allows an attacker to use a maliciously configured Git user email to...
CVE-2025-11611
A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the argument uemail causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public...
CVE-2025-11611
CVE-2025-11611 affects SourceCodester Simple Inventory System 1.0, with the vulnerability located in an unknown function of /user.php where manipulation of the uemail parameter yields SQL injection. The flaw is exploitable remotely and exploits have been publicly released. Multiple sources (NVD, ...
EUVD-2010-5057
Malware in sbrugna...
EUVD-2020-25280
Malware in sbrugna...
EUVD-2020-18664
Malware in sbrugna...
EUVD-2021-12022
Malware in sbrugna...
EUVD-2011-4518
Malware in sbrugna...
EUVD-2014-8415
Malware in sbrugna...
EUVD-2005-3337
Malware in sbrugna...
EUVD-2023-32144
Malicious code in bioql PyPI...
EUVD-2023-58808
Malicious code in bioql PyPI...
EUVD-2022-3907
Malicious code in bioql PyPI...
EUVD-2023-42897
Malicious code in bioql PyPI...