1813 matches found
CVE-2025-62369 Xibo CMS: Remote Code Execution through module templates
Xibo is an open source digital signage platform with a web content management system CMS. Versions 4.3.0 and below contain a Remote Code Execution vulnerability in the CMS Developer menu's Module Templating functionality, allowing authenticated users with "System - Add/Edit custom modules and...
CVE-2025-54968
An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Service does not require authentication. In some configurations, this may allow remote users to submit jobs, or local users to submit jobs that will execute with the permissions of other users...
Improper Authorization
com.liferay, com.liferay.organizations.item.selector.web is vulnerable to an improper authorization. The vulnerability is due to the organization selector not checking user permissions, which allows an attacker to obtain a list of all organizations...
PT-2025-43477
In multiple functions of HeaderPrivacyIconsController.kt, there is a possible way to grand permissions across user due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2025-33361
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the CLI Configlet page that, when visited by another user, enables the attacker to execute commands with the target's...
CVE-2025-59303
HAProxy Kubernetes Ingress Controller (before 3.1.13) is vulnerable when the config-snippets feature flag is enabled: it can accept user-provided config snippets from users with create/update permissions, potentially leaking an ingress token secret. Fixed versions are HAProxy Kubernetes Ingress C...
Linux Distros Unpatched Vulnerability : CVE-2025-49641
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A regular Zabbix user with no permission to the Monitoring - Problems view is still able to call the problem.view.refresh action and therefore still retrieve a...
EUVD-2019-4323
Malware in sbrugna...
EUVD-2021-11119
Malware in sbrugna...
EUVD-2021-11958
Malware in sbrugna...
EUVD-2021-11071
Malware in sbrugna...
EUVD-2010-5236
Malware in sbrugna...
EUVD-2019-13784
Malware in sbrugna...
EUVD-2019-13708
Malware in sbrugna...
EUVD-2002-0009
Malware in sbrugna...
EUVD-2021-18072
Malware in sbrugna...
EUVD-2021-27298
Malware in sbrugna...
EUVD-2013-4869
Malware in sbrugna...