161 matches found
EUVD-2020-26680
Malware in sbrugna...
EUVD-2021-16235
Malware in sbrugna...
EUVD-2020-2735
Malware in sbrugna...
EUVD-2025-27272
Malicious code in bioql PyPI...
EUVD-2025-10307
Malicious code in bioql PyPI...
EUVD-2024-0495
Malicious code in bioql PyPI...
EUVD-2023-51317
Malicious code in bioql PyPI...
EUVD-2024-17315
Malicious code in bioql PyPI...
EUVD-2022-3080
Malicious code in bioql PyPI...
EUVD-2023-0405
Malicious code in bioql PyPI...
CVE-2025-58449 Maho Vulnerable to Authenticated Remote Code Execution via File Upload
Maho is a free and open source ecommerce platform. In Maho prior to 25.9.0, an authenticated staff user with access to the Dashboard and Catalog\Manage Products permissions can create a custom option on a listing with a file input field. By allowing file uploads with a .php extension, the user ca...
CVE-2025-58449 Maho Vulnerable to Authenticated Remote Code Execution via File Upload
Maho is a free and open source ecommerce platform. In Maho prior to 25.9.0, an authenticated staff user with access to the Dashboard and Catalog\Manage Products permissions can create a custom option on a listing with a file input field. By allowing file uploads with a .php extension, the user ca...
BIT-GRAFANA-2025-3260
A security vulnerability in the /apis/dashboard.grafana.app/ endpoints allows authenticated users to bypass dashboard and folder permissions. The vulnerability affects all API versions v0alpha1, v1alpha1, v2alpha1. Impact: - Viewers can view all dashboards/folders regardless of permissions -...
Grafana vulnerable to authenticated users bypassing dashboard, folder permissions
A security vulnerability in the /apis/dashboard.grafana.app/ endpoints allows authenticated users to bypass dashboard and folder permissions. The vulnerability affects all API versions v0alpha1, v1alpha1, v2alpha1. Impact: - Viewers can view all dashboards/folders regardless of permissions -...
CVE-2025-3260
CVE-2025-3260 affects Grafana dashboards: the /apis/dashboard.grafana.app/* endpoints allow authenticated users to bypass dashboard and folder permissions across v0alpha1, v1alpha1, and v2alpha1. Reported impacts include viewers seeing all dashboards/folders, editors viewing/editing/deleting acro...
CVE-2025-3260
A security vulnerability in the /apis/dashboard.grafana.app/ endpoints allows authenticated users to bypass dashboard and folder permissions. The vulnerability affects all API versions v0alpha1, v1alpha1, v2alpha1. Impact: - Viewers can view all dashboards/folders regardless of permissions -...
CVE-2025-3260
A security vulnerability in the /apis/dashboard.grafana.app/ endpoints allows authenticated users to bypass dashboard and folder permissions. The vulnerability affects all API versions v0alpha1, v1alpha1, v2alpha1. Impact: - Viewers can view all dashboards/folders regardless of permissions -...
CVE-2023-47184
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Proper Fraction LLC. Admin Bar & Dashboard Access Control plugin = 1.2.8 versions...