156 matches found
Vulnerabilities fixed in SAP products
SAP has fixed vulnerabilities in several products, including SAP CRM, SAP S/4HANA, SAP NetWeaver Application Server ABAP, SAP Supply Chain Management, SAP BusinessObjects BI Platform, SAP Document Management System, SAP Commerce Cloud, and SAP Business Workflow. The vulnerabilities include code...
SourceCodester Prison Management System 授权问题漏洞
The SourceCodester Prison Management System is an open-source prison management system developed by SourceCodester. Version 1.0 of the SourceCodester Prison Management System has vulnerabilities related to authorization issues. These vulnerabilities stem from session fixation, which may lead to...
phpMyFAQ security vulnerabilities
phpMyFAQ is a multilingual, database-driven FAQ system developed by Thorsten Rinne. Versions of phpMyFAQ 4.0.16 and earlier contain security vulnerabilities. These vulnerabilities stem from authorization logic flaws, which may allow non-administrative users to trigger configuration backups and...
Birebirsoft Sufirmam authorization issue vulnerability
Birebirsoft Sufirmam is a barrel water distribution management system developed by the Turkish company Birebirsoft. Versions of Birebirsoft Sufirmam from 23012026 and earlier have vulnerabilities related to authorization. These vulnerabilities stem from major weaknesses that allow authentication...
Birebirsoft Sufirmam authorization issue vulnerability
Birebirsoft Sufirmam is a barrel water distribution management system developed by the Turkish company Birebirsoft. Versions of Birebirsoft Sufirmam from 23012026 onward have vulnerabilities related to authorization processes. These vulnerabilities stem from improper restrictions on authenticatio...
WordPress plugin Event Espresso 4 Decaf has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
Web2Print Tools Bundle for Pimcore Security Vulnerabilities
Web2Print Tools Bundle for Pimcore is an open-source extension suite developed for Pimcore. Versions prior to 5.2.2 and 6.1.1 of Web2Print Tools Bundle for Pimcore contained security vulnerabilities. These vulnerabilities stemmed from the lack of server-side authorization checks for API endpoints...
CVE-2025-41078 Multiple vulnerabilities in Viafirma products
Weaknesses in the authorization mechanisms of Viafirma Documents v3.7.129 allow an authenticated user without privileges to list and access other user data, use user creation, modification, and deletion features, and escalate privileges by impersonating other users of the application in the...
PT-2026-2267
Name of the Vulnerable Software and Affected Versions Viafirma Documents version 3.7.129 Description Weaknesses in the authorization mechanisms allow an authenticated user without privileges to list and access other user data, use user creation, modification, and deletion features, and escalate...
WordPress plugin Listdom 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
EUVD-2025-201498
Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to 2.41.0, a flaw in the server-side authorization logic allowed authenticated users to perform actions beyond their assigned roles across multiple features. Because the affected endpoints...
Security Analysis of Agentic AI Communication Protocols: A Comparative Evaluation
Multi-agent systems MAS powered by artificial intelligence AI are increasingly foundational to complex, distributed workflows. Yet, the security of their underlying communication protocols remains critically under-examined. This paper presents the first empirical, comparative security analysis of...
EUVD-2025-33727
Incorrect Permission Assignment for Critical Resource, Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization, Incorrect Authorization vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Privilege Abuse, Authentication Bypass.This issue affects Aybs...
PT-2025-41565
Name of the Vulnerable Software and Affected Versions Aybs Interaktif versions 2024 through 28082025 Description The software exhibits flaws in permission management, potentially allowing unauthorized access to sensitive information and enabling privilege abuse and authentication bypass. This cou...
EUVD-2020-25291
Malware in sbrugna...
EUVD-2013-6516
Malware in sbrugna...
EUVD-2018-0549
Malware in sbrugna...
EUVD-2014-7960
Malware in sbrugna...