77 matches found
📄 Whistlelink Site-Access Password Exposed
The Whistlelink reporting portal protects optionally-enabled, password-gated whistleblowing sites with a site-access password. When a visitor unlocks such a site, the client validates the password by issuing an HTTP GET request that carries the password as a URL query-string parameter which is...
PT-2026-29931
Harbor: LDAP password and OIDC secret are not redacted in the audit log in github.com/goharbor/harbor...
CVE-2024-34082
Grav is a file-based Web platform. Prior to version 1.7.46, a low privilege user account with page edit privilege can read any server files using Twig Syntax. This includes Grav user account files - /grav/user/accounts/.yaml. This file stores hashed user password, 2FA secret, and the password res...
CVE-2025-27919
An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...
EUVD-2025-38149
An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...
CVE-2025-27919
An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...
CVE-2025-27919
An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...
AnyDesk 安全漏洞
AnyDesk is a remote desktop connection software from the German company AnyDesk. A security vulnerability exists in AnyDesk 9.0.4 and earlier versions that originates from a remote connection user with Control My Device privileges can manipulate remote AnyDesk settings and create a password for a...
CVE-2025-27919
CVE-2025-27919 affects AnyDesk up to version 9.0.4. A remote user with the 'Control my device' permission can modify remote AnyDesk settings and create a password for the Full Access profile without counterparty confirmation, enabling later connections without confirmation. Impact per sources: co...
CVE-2025-27919
An issue was discovered in AnyDesk through 9.0.4. A remotely connected user with the "Control my device" permission can manipulate remote AnyDesk settings and create a password for the Full Access profile without needing confirmation from the counterparty. Consequently, the attacker can later...
EUVD-2012-1850
Malware in sbrugna...
EUVD-2011-4253
Malware in sbrugna...
EUVD-2005-4040
Malware in sbrugna...
EUVD-2013-4848
Malware in sbrugna...
EUVD-2016-7987
Malware in sbrugna...
EUVD-2020-30294
Malware in sbrugna...
EUVD-2021-2613
Malware in sbrugna...
EUVD-2007-0480
Malware in sbrugna...