CVE-2026-7887 For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status

For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A user with uIsActive=0 suspended, banned, terminated employee can still authenticate via OAuth and receive valid API tokens. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score o...

EUVD-2019-12209

Malware in sbrugna...

EUVD-2017-1964

Malware in sbrugna...

EUVD-2018-14860

Malware in sbrugna...

EUVD-2020-22374

Malware in sbrugna...

EUVD-2017-12439

Malware in sbrugna...

EUVD-2024-18814

Malicious code in bioql PyPI...

Ubuntu: Security Advisory (USN-7254-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...