Client-Side Enforcement of Server-Side Security

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Client-Side Enforcement of Server-Side Security through the processAction registration flow in the WebAuthn...

EUVD-2026-25048

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed a user to use invalidated or incorrectly scoped credentials to access Virtual Registries under certain conditions...

openSUSE 16 Security Update : strongswan (openSUSE-SU-2026:20547-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20547-1 advisory. Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access bsc1257359. - CVE-2026-25075: Integer Underflow When Handling EAP-TTLS A...

PT-2026-28075

n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.27, an authenticated user with the global:member role could exploit chained authorization flaws in n8n's credential pipeline to steal plaintext secrets from generic HTTP credentials httpBasicAuth,...

CVE-2026-4404 Use of hard coded credentials in GoHarbor Harbor

Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...

CVE-2019-11618

doorGets 7.0 has a default administrator credential vulnerability. A remote attacker can use this vulnerability to gain administrator privileges for the creation and modification of articles via an H0XZlT44FcN1j9LTdFc5XRXhlF30UaGe1g3cZY6i1K9 accesstoken in a uri=blog=index=blog action to...

CVE-2019-20025

Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with a hardcoded username and password, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account with manufacturer privileg...

EUVD-2017-1268

Malware in sbrugna...

EUVD-2011-5017

Malware in sbrugna...

EUVD-2008-2288

Malware in sbrugna...

EUVD-2007-2767

Malware in sbrugna...

EUVD-2019-5078

Malware in sbrugna...

EUVD-2017-6418

Malware in sbrugna...

EUVD-2013-1967

Malware in sbrugna...

EUVD-2019-5077

Malware in sbrugna...

EUVD-2022-15240

Malicious code in bioql PyPI...

EUVD-2025-27566

Malicious code in bioql PyPI...

EUVD-2023-27470

Malicious code in bioql PyPI...

EUVD-2024-32744

Malicious code in bioql PyPI...

EUVD-2023-54078

Malicious code in bioql PyPI...