Missing Authorization

Overview com.liferay:com.liferay.blogs.item.selector.web is a Liferay Blogs Item Selector Web Affected versions of this package are vulnerable to Missing Authorization via insufficient permission checks in the BlogsItemSelectorViewDisplayContext class, when handling image access. An attacker can...

CVE-2025-62275

Blogs in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions does not check permission of images in a blog entry, which allows remote attackers ...

CVE-2025-62275

CVE-2025-62275 affects Liferay Portal 7.4.0–7.4.3.111 and older unsupported versions, and Liferay DXP 2023.Q3–2023.Q4, where images in blog entries bypass permission checks via crafted URLs. The issue stems from missing permission verification in image access within BlogsItemSelectorViewDisplayCo...

EUVD-2016-9490

Malware in sbrugna...

EUVD-2013-4305

Malware in sbrugna...

EUVD-2019-8538

Malware in sbrugna...

EUVD-2024-47560

Malicious code in bioql PyPI...

EUVD-2025-16472

Malicious code in bioql PyPI...

EUVD-2024-51931

Malicious code in bioql PyPI...

EUVD-2023-25080

Malicious code in bioql PyPI...

EUVD-2022-52459

Malicious code in bioql PyPI...

EUVD-2023-35974

Malicious code in bioql PyPI...

EUVD-2023-44745

Malicious code in bioql PyPI...

EUVD-2023-44742

Malicious code in bioql PyPI...

EUVD-2022-26108

Malicious code in bioql PyPI...

CVE-2025-34234

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 VA/SaaS deployments contain two hardcoded private keys that are shipped in the application containers printerlogic/pi, printerlogic/printer-admin-api, and printercloud/pi...

CVE-2025-43203

The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note...

PT-2025-37085

Name of the Vulnerable Software and Affected Versions Supermicro BMC firmware versions affected versions not specified Description The Supermicro BMC firmware contains a flaw in its firmware validation logic. This allows an attacker to update the system firmware with a specially crafted image,...

CVE-2025-32320

A confused deputy vulnerability in the Android System UI allows for local escalation of privilege (EoP) . An attacker can exploit an obfuscated agent within the system's user interface to gain elevated privileges without requiring additional execution privileges or user interaction. This flaw may...

PT-2025-36241

Name of the Vulnerable Software and Affected Versions: Android System UI affected versions not specified Description: A confused deputy condition exists in Android System UI that may allow applications to gain elevated privileges. This could lead to local escalation of privilege without requiring...