The vulnerability of KYC Solutions’ software for customer identity verification, related to the transmission of user credentials in unencrypted form, allows a perpetrator to gain unauthorized access to users’ accounts.

The vulnerability of KYC Solutions’ software for customer identity verification is related to the transmission of user credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to users’ account information...

EUVD-2018-12259

Malware in sbrugna...

EUVD-2010-2948

Malware in sbrugna...

EUVD-2022-38170

Malicious code in bioql PyPI...

EUVD-2025-25283

Malicious code in bioql PyPI...

DRUPAL-CONTRIB-2025-088

This module enables users to login by email address with the minimal configurations. The module included some protection against brute force attacks on the login form, however they were incomplete. An attacker could bypass the brute force protection allowing them to potentially gain access to an...

GHSA-QGWX-RFFP-6CX9 Mattermost Fails to Lockout LDAP Users After Repeated Login Failures

Mattermost versions 10.6.x = 10.6.1, 10.5.x = 10.5.2, 10.4.x = 10.4.4, 9.11.x = 9.11.11 fail to lockout LDAP users following repeated login failures, which allows attackers to lock external LDAP accounts through repeated login failures through Mattermost...

CVE-2025-31947

Mattermost versions 10.6.x = 10.6.1, 10.5.x = 10.5.2, 10.4.x = 10.4.4, 9.11.x = 9.11.11 fail to lockout LDAP users following repeated login failures, which allows attackers to lock external LDAP accounts through repeated login failures through Mattermost...

CVE-2024-5163: Incorrect Permission Assignment for Critical Resource

Improper permission settings for mobile applications com.transsion.carlcare may lead to user password and account security risks...

Default Password (satori) for 'rewt' Account

The account 'rewt' has the password 'satori'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "rewt"; password = "satori"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11265;...

CVE-1999-0585

A Windows NT administrator account has the default name of Administrator...

freestats-cgi.txt

Date: Sat, 21 Nov 1998 12:54:41 -0500 From: John Carlton To: [email protected] Subject: Freestats.com CGI vulnerability About a year ago I developed an exploit for the free web stats services offered at freestats.com, and supplied the webmaster with proper code to patch the bug. After hearing ...