1374 matches found
guests 安全漏洞
guests is a file sharing program open-sourced by ownCloud. A security vulnerability exists in guests prior to version 0.12.5, which stems from insufficient token validation in showPasswordForm and could lead to unauthenticated user enumeration...
CVE-2025-59716
ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/email/token endpoint. Because of insufficient validation of the supplied token in showPasswordForm, the server responds differently when an e-mail address corresponds to a valid pending guest user...
PT-2025-45141
Name of the Vulnerable Software and Affected Versions ownCloud Guests versions prior to 0.12.5 Description The application allows unauthenticated user enumeration through the /apps/guests/register/email/token API endpoint. Insufficient validation of the supplied token within the showPasswordForm...
CVE-2025-54461
ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited guest user may register itself as a guest user...
CVE-2025-54461
CVE-2025-54461 affects ChatLuck. Affected component: the invitation flow for guest users. Root cause: insufficient granularity of access control that allows an uninvited guest to register as a guest user. Impact: potential unauthorized guest registrations (privacy/abuse risk) as described in mult...
ChatLuck 安全漏洞
ChatLuck is an enterprise internal and external communication software from ChatLuck Japan. A security vulnerability exists in ChatLuck that stems from insufficient access control granularity when inviting guest users, which could result in uninvited guest users registering as guest users...
EUVD-2022-55150
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Deactivate sysctlrecordpanicmsg by default in isolated guests hvpanicpage might contain guest-sensitive information, do not dump it over to Hyper-V by default in isolated guests. While at it, update some...
EUVD-2025-33556
Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitting the request was actually authenticated had the right key...
CVE-2023-53647
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't dereference ACPI root object handle Since the commit referenced in the Fixes: tag below the VMBus client driver is walking the ACPI namespace up from the VMBus ACPI device to the ACPI namespace root obje...
EUVD-2014-1740
Malware in sbrugna...
EUVD-2007-5877
Malware in sbrugna...
EUVD-2009-3507
Malware in sbrugna...
EUVD-2021-13134
Malware in sbrugna...
EUVD-2018-17276
Malware in sbrugna...
EUVD-2018-6719
Malware in sbrugna...
EUVD-2018-7468
Malware in sbrugna...
EUVD-2016-2665
Malware in sbrugna...
EUVD-2021-16131
Malware in sbrugna...