14652 matches found
EUVD-2019-15687
Malware in sbrugna...
EUVD-2020-25491
Malware in sbrugna...
EUVD-2020-5667
Malware in sbrugna...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cloud-init (UTSA-2025-986088)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986088 advisory. When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this,cloud-init default configurations...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986768)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986768 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix list protocols enumeration in the base protocol While enumerating protocol...
Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Prestashop
CVE-2025-51586 - PrestaShop AdminLogin Email Enumeration PoC...
CVE-2025-58586
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
CVE-2025-58579
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration...
CVE-2025-58579
The CVE-2025-58579 entry describes an authentication bypass where an unauthenticated user can request data from a specific endpoint, enabling user enumeration. Connected sources confirm the vulnerability relates to SICK Enterprise Analytics and SICK Logistic Analytics products (SICK PSIRT advisor...
CVE-2025-58579 Username Disclosure Through Missing Authentication
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration...
EUVD-2025-32500
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration...
CVE-2025-58579
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration...
CVE-2025-58579 Username Disclosure Through Missing Authentication
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration...
CVE-2025-58590 Path traversal
It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information...
CVE-2025-58586
CVE-2025-58586 affects SICK Enterprise Analytics and SICK Logistic Analytics products. The vulnerability stems from distinct error messages for login failures (incorrect password vs. non-existent username), enabling attacker-driven username enumeration. Reported impact: information disclosure (us...
CVE-2025-58586
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
CVE-2025-58586 User Enumeration by excessive error output
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...
CVE-2025-58586 User Enumeration by excessive error output
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...