679 matches found
CVE-2023-53737: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting vulnerability in Kentico Xperience allows global administrators to inject malicious payloads via the Localization application. Attackers can execute scripts that could affect multiple parts of the administration interface...
CVE-2025-14777
A flaw was found in Keycloak. An IDOR Broken Access Control vulnerability exists in the admin API endpoints for authorization resource management, specifically in ResourceSetService and PermissionTicketService. The system checks authorization against the resourceServer client ID provided in the A...
EUVD-2025-202403
Keycloak Admin REST Representational State Transfer API does not properly enforce permissions...
CVE-2025-14082 Keycloak-services: keycloak admin rest api: improper access control leads to sensitive role metadata information disclosure
A flaw was found in Keycloak Admin REST Representational State Transfer API. This vulnerability allows information disclosure of sensitive role metadata via insufficient authorization checks on the /admin/realms/realm/roles endpoint...
CVE-2021-4466: Improper Neutralization of Special Elements used in an OS Command
IPCop versions up to and including 2.1.9 contain an authenticated remote code execution vulnerability within the web-based administration interface. The email configuration component inserts user-controlled values, including the EMAILPW parameter, directly into system-level operations without...
CVE-2020-36866
Nagios XI versions prior to 5.7.3 are vulnerable to cross-site scripting XSS via the Manage Users page of the Admin interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...
XWiki Platform HTTP Meta Info Fields XSS
The vulnerabilities of the HTTP Meta Info, Footer Copyright, and Footer Version fields in the administration interface for the XWiki Platform’s collaborative web applications are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities could allow...
EUVD-2021-23861
Malware in sbrugna...
EUVD-2002-0235
Malware in sbrugna...
EUVD-2008-6670
Malware in sbrugna...
EUVD-2000-0416
Malware in sbrugna...
EUVD-2019-9420
Malware in sbrugna...
EUVD-2010-4205
Malware in sbrugna...
EUVD-2009-1288
Malware in sbrugna...
EUVD-2005-3694
Malware in sbrugna...
EUVD-2006-4897
Malware in sbrugna...
EUVD-2015-7211
Malware in sbrugna...
EUVD-2004-1890
Malware in sbrugna...