CVE-2025-8053: Insufficient Granularity of Access Control

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges. This issue affects Flipper: 3.1....

PT-2025-42809

Name of the Vulnerable Software and Affected Versions opentext Flipper version 3.1.2 Description A path traversal issue exists in opentext Flipper that could allow a user to access files hosted on the server. The issue involves absolute path traversal. Recommendations At the moment, there is no...

OpenText Flipper security vulnerabilities

OpenText Flipper is a vendor self-submission invoice portal extension package from OpenText Canada. A security vulnerability exists in OpenText Flipper version 3.1.2 that originates from an externally controlled filename or path and could lead to a path traversal attack...

OpenText Flipper security vulnerabilities

OpenText Flipper is a vendor self-submission invoice portal extension package from OpenText Canada. A security vulnerability exists in OpenText Flipper version 3.1.2, which stems from a low-privileged user being able to interact with the database via the HQL processor, potentially leading to an S...

CVE-2025-8049: Insufficient Granularity of Access Control

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low-privilege user to elevate privileges within the application. This issue affects Flipper: 3.1.2...

CVE-2025-8048: External Control of File Name or Path

External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then download the specified file from the system by requesting the stored document ID. This issue affects Flipper: 3.1.2...

PT-2025-42811

Name of the Vulnerable Software and Affected Versions opentext Flipper version 3.1.2 Description An issue exists in opentext Flipper related to insufficient granularity of access control. This allows a low privilege user to interact with the backend API without sufficient privileges due to...

PT-2025-42808

Name of the Vulnerable Software and Affected Versions opentext Flipper version 3.1.2 Description An issue exists in opentext Flipper where insufficient granularity of access control allows exploiting incorrectly configured access control security levels. This could allow a low-privilege user to...

CVE-2025-8051: Path Traversal: '.../...//'

Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal. The vulnerability could allow a user to access files hosted on the server. This issue affects Flipper: 3.1.2...

PT-2025-42810

Name of the Vulnerable Software and Affected Versions opentext Flipper version 3.1.2 Description A SQL Injection issue exists in opentext Flipper. The issue could allow a low privilege user to interact with the database in unintended ways and extract data by interacting with the HQL processor. Th...

OpenText Flipper security vulnerabilities

OpenText Flipper is a vendor self-submission invoice portal extension package from OpenText Canada. A security vulnerability exists in OpenText Flipper version 3.1.2 that stems from vulnerability to an absolute path traversal attack that could lead to accessing files on the server...

PT-2025-42807

Name of the Vulnerable Software and Affected Versions opentext Flipper version 3.1.2 Description An issue exists in opentext Flipper that allows for path traversal due to external control of file name or path. This could allow a user to submit a stored local file path and then download a specifie...

OpenText Flipper security vulnerabilities

OpenText Flipper is a vendor self-submission invoice portal extension package from OpenText Canada. A security vulnerability exists in OpenText Flipper version 3.1.2 that stems from insufficient access control granularity and could lead to elevation of privilege...

EUVD-2006-3678

Malware in sbrugna...

EUVD-2022-43654

Malicious code in bioql PyPI...

Malware in flipper-plugins

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2022-40363

A buffer overflow in the component nfcdeviceloadmifareuldata of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service DoS via a crafted NFC file...

Malicious code in vishal-plugin-flipper (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-4583 Malicious code in vishal-plugin-flipper (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in flipper-plugin-preferences (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72ed77743cfbbcc3b9082b68fd1ebbfc81e78c93b7b73d1045b70adae1785b8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...