CVE-2025-54765

The Xorux XorMon-NG infrastructure performance monitoring platform, version 1.8 and prior on Debian , is vulnerable to a privilege escalation flaw (CWE-648 ). An API endpoint intended exclusively for administrators is hidden from but accessible by lower-level read-only web application users. An a...

PT-2025-31155

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An API endpoint intended for web application administrators is accessible to lower-level read-only users. This allows unauthorized export of the appliance...