880 matches found
CVE-2026-79684: Protection Mechanism Failure
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges...
CVE-2026-40968 Spring gRPC SecurityContext leaks across requests on authorization failure
When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a subsequent unauthenticated request on the same thread. This may allow the subsequent user to gain escalated permissions. Affected versions:...
CVE-2026-40968 Spring gRPC SecurityContext leaks across requests on authorization failure
When an authenticated user is denied access to a gRPC method, their authenticated identity remains bound to the gRPC worker thread and can be inherited by a subsequent unauthenticated request on the same thread. This may allow the subsequent user to gain escalated permissions. Affected versions:...
CVE-2022-38935
An issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api/SsoApi.java and /src/main/java/cn/niter/forum/controller/AdminController.java, allows attackers to gain escalated privileges...
CVE-2025-66906
Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...
CVE-2025-66906
Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...
CVE-2025-66906
Cross Site Request Forgery CSRF vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escalated privileges...
CVE-2025-66906
A Cross Site Request Forgery (CSRF) vulnerability exists in the Turms Admin API (specifically in turms v0.10.0-SNAPSHOT and prior versions). This flaw allows an attacker to perform unauthorized actions that can lead to escalated privileges . Turms is described as an instant messaging engine from ...
CVE-2025-63206: Missing Authentication for Critical Function
An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser...
EUVD-2020-0096
Malware in sbrugna...
EUVD-2020-10356
Malware in sbrugna...
EUVD-2020-5425
Malware in sbrugna...
EUVD-2021-12306
Malware in sbrugna...
EUVD-2021-12336
Malware in sbrugna...
EUVD-2021-20829
Malware in sbrugna...
EUVD-2021-12337
Malware in sbrugna...
EUVD-2020-4198
Malware in sbrugna...
EUVD-2016-1308
Malware in sbrugna...