EUVD-2019-8961

Malware in sbrugna...

EUVD-2017-8035

Malware in sbrugna...

EUVD-2016-1612

Malware in sbrugna...

Netdisco Unauthenticated Access

Netdisco is a web-based network management tool. When accessible without authentication, an attacker can gain unauthorized access to the Netdisco interface, potentially leading to information disclosure or further exploitation of the system. No source data...

EUVD-2023-32294

Malicious code in bioql PyPI...

EUVD-2022-34580

Malicious code in bioql PyPI...

EUVD-2023-2843

Malicious code in bioql PyPI...

EUVD-2025-22718

Malicious code in bioql PyPI...

EUVD-2023-1856

Malicious code in bioql PyPI...

EUVD-2025-8830

Malicious code in bioql PyPI...

CVE-2025-54831

Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effectively applying a "write-only" model for sensitive values. In Airflow 3.0.3, this model was...

GoCD Unauthenticated Access

GoCD is an open-source continuous delivery server. When accessible without authentication, an attacker can gain unauthorized access to the GoCD interface, potentially leading to information disclosure or further exploitation of the system. No source data...

CVE-2025-59363

In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...

PT-2025-37063

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the management interface access control list ACL processing feature could allow an unauthenticated, remote attacker to bypass configured ACLs for the SSH,...

CVE-2025-55739

api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© PBX. In versions lower than 15.0.13, 16.0.2 through 16.0.14, 17.0.1 and 17.0.2, there is an identical OAuth private key used across multiple systems that installed the same FreePBX RPM or DEB package. An...

CVE-2025-9696

The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range could exploit this vulnerability to gain full access to the device's servicing interface. This access allows the...

CVE-2024-50645

MallChat v1.0-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access API without any token...

CVE-2024-50641

An authentication bypass vulnerability in PandoraNext-TokensTool v0.6.8 and before. An attacker can exploit this vulnerability to access API without any token...

Vulnerabilities fixed in Commvault

Commvault has fixed vulnerabilities in Commvault components such as CommCell and ComServe versions prior to 11.36.60. The vulnerabilities are in versions of Commvault prior to 11.36.60. The first vulnerability allows unauthenticated attackers to execute API calls through a known login mechanism,...

PT-2025-34068 · Jobx · Jobx

Name of the Vulnerable Software and Affected Versions: jobx versions up to 1.0.1-RELEASE Description: An authentication bypass issue exists in jobx up to version 1.0.1-RELEASE. An attacker can exploit this issue to access sensitive API endpoints without any token through the preHandle function...