2238 matches found
Kentico Xperience < 13.0.173 Auth Bypass
According to its self-reported version number, the version of Kentico Xperience on the remote Windows host is prior to 13.0.173. It is, therefore, affected by an authentication bypass vulnerability via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2025-988578)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988578 advisory. ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when ...
VulnCheck KEV: CVE-2025-2746
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...
EUVD-2025-34831
D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Login' endpoint returns distinct JSON responses depending on whether the supplied username is associated with an existing account. Because the responses differ in the...
CVE-2025-11196
The External Login plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.11.2 due to the 'exlogtestconnection' AJAX action lacking capability checks or nonce validation. This makes it possible for authenticated attackers, with subscriber-leve...
CVE-2025-11196
The CVE-2025-11196 issue affects the WordPress External Login plugin (versions up to 1.11.2). The vulnerability is due to the exlog_test_connection AJAX action lacking capability checks or nonce validation, enabling authenticated users with subscriber-level access and above to query the external ...
JLSEC-2025-7 ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain...
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
EUVD-2002-0341
Malware in sbrugna...
EUVD-2009-2020
Malware in sbrugna...
EUVD-2002-0209
Malware in sbrugna...
EUVD-2005-1589
Malware in sbrugna...
EUVD-2003-1394
Malware in sbrugna...
EUVD-2007-5358
Malware in sbrugna...
EUVD-2018-11338
Malware in sbrugna...
EUVD-2019-13599
Malware in sbrugna...
EUVD-2019-18398
Malware in sbrugna...
EUVD-2000-0755
Malware in sbrugna...
EUVD-2008-5855
Malware in sbrugna...