708 matches found
CVE-2025-62086 WordPress Яндекс Доставка (Boxberry) plugin <= 2.34 - Broken Access Control vulnerability
Missing Authorization vulnerability in akazanstev Яндекс Доставка Boxberry boxberry allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Яндекс Доставка Boxberry: from n/a through = 2.34...
Yandex Telemost 安全漏洞
Yandex Telemost is an application for easily creating video calls or video chats from the Russian company Yandex. A security vulnerability exists in Yandex Telemost versions prior to 2.19.1, which stems from improper control of the search path element and could lead to search order hijacking...
PT-2025-50063
Missing Authorization vulnerability in Yandex Metrika Yandex.Metrica wp-yandex-metrika allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yandex.Metrica: from n/a through = 1.2.2...
PT-2025-50090
Name of the Vulnerable Software and Affected Versions Yandex Telemost versions prior to 2.19.1 Description An uncontrolled search path element issue exists in Yandex Telemost on MacOS, enabling search order hijacking. This allows an attacker to potentially manipulate the system's search path to...
PT-2025-50089
Name of the Vulnerable Software and Affected Versions Telemost versions prior to 2.245 Description An uncontrolled search path element issue exists in Yandex Messenger on MacOS, enabling search order hijacking. This affects Telemost. Recommendations Update Telemost to version 2.245 or later...
Yandex Disk 安全漏洞
Yandex Disk is a cloud storage service from the Russian company Yandex. A security vulnerability exists in Yandex Disk versions prior to 3.2.45.3275, which stems from improper control of the search path element and could lead to search order hijacking...
Yandex Messenger 安全漏洞
Yandex Messenger is an instant messaging application from the Russian company Yandex. A security vulnerability exists in Yandex Messenger versions prior to 2.245, which stems from improper control of the search path element and may lead to search order hijacking...
WordPress plugin Yandex.Metrica 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
PT-2025-49992
Missing Authorization vulnerability in akazanstev Яндекс Доставка Boxberry boxberry allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Яндекс Доставка Boxberry: from n/a through = 2.32...
WordPress Yandex.Metrica plugin <= 1.2.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by ohmymex in WordPress Plugin Yandex.Metrica versions = 1.2.2...
[SECURITY] Fedora 43 Update: rclone-1.72.0-1.fc43
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...
WordPress Яндекс Доставка (Boxberry) plugin <= 2.34 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Яндекс Доставка Boxberry versions = 2.34...
Chinese Threat Group 'Jewelbug' Quietly Infiltrated Russian IT Network for Months
A threat actor with ties to China has been attributed to a five-month-long intrusion targeting a Russian IT service provider, marking the hacking group's expansion to the country beyond Southeast Asia and South America. The activity, which took place from January to May 2025, has been attributed ...
EUVD-2021-12174
Malware in sbrugna...
EUVD-2021-12173
Malware in sbrugna...
EUVD-2019-0290
Malware in sbrugna...
EUVD-2019-0247
Malware in sbrugna...
EUVD-2019-0353
Malware in sbrugna...