335 matches found
CVE-2025-63562
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 suffers from insufficient server-side authorization. Authenticated attackers can call several endpoints and perform create/update/delete actions on resources owned by arbitrary users by manipulating request parameters e.g.,...
EUVD-2025-36108
The IDonate WordPress plugin before 2.1.13 does not have authorisation and CSRF when deleting users via an action handler, allowing unauthenticated attackers to delete arbitrary users...
Flowring Agentflow 安全漏洞
Flowring Agentflow is an intelligent process automation RPA platform from Flowring China. A security vulnerability exists in Flowring Agentflow that stems from the use of hard-coded encryption keys, which could allow an unauthenticated remote attacker to generate authentication information using ...
EUVD-2002-0658
Malware in sbrugna...
EUVD-2008-6505
Malware in sbrugna...
EUVD-2020-9426
Malware in sbrugna...
EUVD-2005-4204
Malware in sbrugna...
EUVD-2012-0013
Malware in sbrugna...
EUVD-2013-6987
Malware in sbrugna...
EUVD-2007-6462
Malware in sbrugna...
EUVD-2020-20627
Malware in sbrugna...
EUVD-2006-6756
Malware in sbrugna...
EUVD-2005-4776
Malware in sbrugna...
EUVD-2021-32527
Malicious code in bioql PyPI...
EUVD-2025-11100
Malicious code in bioql PyPI...
EUVD-2025-11133
Malicious code in bioql PyPI...
EUVD-2025-30232
Malicious code in bioql PyPI...
EUVD-2025-27774
Malicious code in bioql PyPI...
EUVD-2025-25512
Malicious code in bioql PyPI...
CVE-2025-5955 Service Finder SMS System <= 2.0.0 - Authentication Bypass
The Service Finder SMS System plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.0. This is due to the plugin not verifying a user's phone number before logging them in. This makes it possible for unauthenticated attackers to login as arbitrary...