276 matches found
CVE-2025-27232 Frontend arbitrary file read in oauth.authorize action
An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss...
CVE-2025-27232
An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss...
Zabbix 安全漏洞
Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. A security vulnerability exists in Zabbix that originates from an authenticated super administrator can read arbitrary files using the...
PT-2025-48442
Name of the Vulnerable Software and Affected Versions Zabbix affected versions not specified Description An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver, potentially leading to confidentiality loss. The vulnerable action is...
EUVD-2025-180209
Malicious code in authorize-interface-good-xi-sanitize npm...
EUVD-2025-178601
Malicious code in hash-authorize-sanitize-signal-cloud npm...
Malicious code in authorize-node-slow-stub-daemon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f973329e078b3e9f8e2be2ad30ec9f232ae6fd7f0187ddad996be506c8c2fb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175448
Malicious code in yaml-notify-authorize-code-web npm...
EUVD-2025-180208
Malicious code in authorize-interface-psi-orchestrate-visualize npm...
EUVD-2025-180139
Malicious code in balance-decompress-authorize-query-thread npm...
EUVD-2025-178513
Malicious code in hot-awk-authorize-float-interface npm...
EUVD-2025-176475
Malicious code in sed-node-shell-long-authorize npm...
EUVD-2025-179057
Malicious code in error-error-authorize-phi-mock npm...
EUVD-2025-175553
Malicious code in wind-execute-authorize-mu-byte npm...
EUVD-2025-176419
Malicious code in serialize-stack-omega-node-authorize npm...
EUVD-2025-177498
Malicious code in object-chi-yaml-authorize-zero npm...
EUVD-2025-175725
Malicious code in view-omicron-unix-compress-authorize npm...
EUVD-2025-180204
Malicious code in authorize-route-signal-grid-cache npm...
Malicious code in beta-moon-fast-authorize-deploy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04718f9575365342a95b182394e3faf16985b0f54304fe8408cb783b9ba9d07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...