CVE-2026-27579-CORS-Misconfiguration-Leading-to-Authenticated-Data-Exposure

CVE-2026-27579 – Configuración incorrecta de CORS que conduce a la exposición de datos autenticados 📌 Referencia de aviso ID de CVE: CVE-2026-27579 GHSA: GHSA-qh5m-p8jh-hx88 Proveedor: karnop Producto: realtime-collaboration-platform Gravedad: ALTA CVSS 7.4 Vector:...

PT-2026-45474

Nextcloud is an open source content collaboration platform. From versions 1.15.0 to before 1.15.4, 1.16.0 to before 1.16.3, 1.17.0 to before 1.17.1, and 1.18.0 to before 1.18.1, a malicious user with access to an end-to-end encrypted files drop link was able to also drop files into other end-to-e...

PT-2026-45470

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This...

OPPO O+ Connect 安全漏洞

OPPO O+ Connect is a multi-device connectivity and data collaboration platform developed by OPPO Corporation in China. There is a security vulnerability in OPPO O+ Connect, which stems from the failure to verify the identity of the caller on the pipeline interface, potentially leading to an...

The vulnerability of the application software interface of the Git-based software platform for collaborative code development on GitLab allows a hacker to trigger a service failure.

The vulnerability of the application software interface of a Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability can allow a malicious actor to cause service...

Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2026-16164)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...

CVE-2021-41101

wire-server is an open-source back end for Wire, a secure collaboration platform. Before version 2.106.0, the CORS Access-Control-Allow-Origin header set by nginz is set for all subdomains of .wire.com including wire.com. This means that if somebody were to find an XSS vector in any of the...

EUVD-2018-9613

Malware in sbrugna...

EUVD-2020-6661

Malware in sbrugna...

EUVD-2018-9614

Malware in sbrugna...

EUVD-2014-5337

Malware in sbrugna...

EUVD-2020-8213

Malware in sbrugna...

EUVD-2015-3480

Malware in sbrugna...

EUVD-2021-19526

Malware in sbrugna...

EUVD-2015-6505

Malware in sbrugna...

EUVD-2021-8697

Malicious code in bioql PyPI...

EUVD-2025-16680

Malicious code in bioql PyPI...

EUVD-2025-16681

Malicious code in bioql PyPI...

EUVD-2022-31118

Malicious code in bioql PyPI...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in its unlimited resource distribution, which allows attackers to trigger service interruptions.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...