261 matches found
Bagisto Missing Authentication on Installer API Endpoints
Vulnerable Code File: packages/Ibkul/Installer/src/Routes/Ib.php groupfunction Route::controllerInstallerController::class-\groupfunction Route::get'install', 'index'-\name'installer.index'; Route::middlewareStartSession::class-\prefix'install/api'-\groupfunction Route::post'env-file-setup',...
GHSA-6H7W-V2XR-MQVW Bagisto Missing Authentication on Installer API Endpoints
Vulnerable Code File: packages/Ibkul/Installer/src/Routes/Ib.php groupfunction Route::controllerInstallerController::class-\groupfunction Route::get'install', 'index'-\name'installer.index'; Route::middlewareStartSession::class-\prefix'install/api'-\groupfunction Route::post'env-file-setup',...
CVE-2026-21446 Bagisto Missing Authentication on Installer API Endpoints
Bagisto is an open source laravel eCommerce platform. In versions on the 2.3 branch prior to 2.3.10, API routes remain active even after initial installation is complete. The underlying API endpoints /install/api/ are directly accessible and exploitable without any authentication. An attacker can...
CVE-2026-21446: Missing Authentication for Critical Function
Bagisto is an open source laravel eCommerce platform. In versions on the 2.3 branch prior to 2.3.10, API routes remain active even after initial installation is complete. The underlying API endpoints /install/api/ are directly accessible and exploitable without any authentication. An attacker can...
luksmeta: Data corruption when handling LUKS1 partitions with luksmeta
A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the...
Keyless Entry: Breaking and Entering EMMC RPMB with EMFI
The Replay Protected Memory Block RPMB in modern storage systems provides a secure area where data integrity is ensured by authentication. This block is used in digital devices to store pivotal information that must be safeguarded against modification by potential attackers. This paper targets th...
CLSA-2025-1761214095 qemu-kvm: Fix of CVE-2023-5088
CVE-2023-5088: fix incorrect guest I/O redirection to offset 0 that could allow data overwrite at LBA 0 and potential VM escape...
Red Hat Enterprise Linux 10 安全漏洞
Red Hat Enterprise Linux 10 is a suite of Linux operating systems for business users from Red Hat, an American company. A security vulnerability exists in Red Hat Enterprise Linux 10 that stems from not properly validating free space, which could result in user encrypted data being overwritten an...
EUVD-2004-2582
Malware in sbrugna...
EUVD-2018-15647
Malware in sbrugna...
EUVD-2017-7505
Malware in sbrugna...
EUVD-2017-7477
Malware in sbrugna...
EUVD-2017-12020
Malware in sbrugna...
EUVD-2018-15643
Malware in sbrugna...
EUVD-2017-11948
Malware in sbrugna...
EUVD-2020-29429
Malware in sbrugna...
EUVD-2002-1668
Malware in sbrugna...
EUVD-2017-11972
Malware in sbrugna...