265 matches found
PT-2026-2475
Backend users with access to the redirects module and write permission on the sys redirect table were able to read, create, and modify any redirect record without restriction to the user’s own file-mounts or web-mounts. This allowed attackers to insert or alter redirects pointing to arbitrary URL...
CVE-2019-12426
an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06...
CVE-2019-12517
An XSS issue was discovered in the slickquiz plugin through 1.3.7.1 for WordPress. The savequizscore functionality available via the /wp-admin/admin-ajax.php endpoint allows unauthenticated users to submit quiz solutions/answers, which are stored in the database and later shown in the WordPress...
GitHub Enterprise Server 安全漏洞
GitHub Enterprise Server is an open source application from GitHub in the United States. It provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server versions...
CVE-2025-12636
The Ubia camera ecosystem fails to adequately secure API credentials, potentially enabling an attacker to connect to backend services. The attacker would then be able to gain unauthorized access to available cameras, enabling the viewing of live feeds or modification of settings...
EUVD-2007-3479
Malware in sbrugna...
EUVD-2019-0804
Malware in sbrugna...
EUVD-2021-21230
Malware in sbrugna...
EUVD-2018-8440
Malware in sbrugna...
EUVD-2010-5008
Malware in sbrugna...
EUVD-2021-0040
Malware in sbrugna...
EUVD-2025-5494
Malicious code in bioql PyPI...
EUVD-2022-5502
Malicious code in bioql PyPI...
EUVD-2021-30487
Malicious code in bioql PyPI...
EUVD-2022-1993
Malicious code in bioql PyPI...
EUVD-2024-3132
Malicious code in bioql PyPI...
EUVD-2025-6937
Malicious code in bioql PyPI...
EUVD-2022-26446
Malicious code in bioql PyPI...
GHSA-J8VM-7Q52-2M2M TYPO3 CSV download feature information disclosure
Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having access to them...
CVE-2025-59016 Information Disclosure via File Abstraction Layer
Error messages containing sensitive information in the File Abstraction Layer in TYPO3 CMS versions 9.0.0-9.5.54, 10.0.0-10.4.53, 11.0.0-11.5.47, 12.0.0-12.4.36, and 13.0.0-13.4.17 allow backend users to disclose full file paths via failed low-level file-system operations...