138 matches found
CVE-2026-63338
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated user can view and edit a resource belonging to another user without authorization. The API-key edit/update path in ApiKeyController selects records by identifier without...
CVE-2026-63339
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated, non-administrative user can elevate their privileges to administrator status. Restricting administrative functions reduces exposure but is not a complete fix. This issue is...
EUVD-2026-114545
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated, non-administrative user can elevate their privileges to administrator status. Restricting administrative functions reduces exposure but is not a complete fix. This issue is...
CVE-2026-63339 IXP Manager has authenticated non-administrator privilege escalation
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated, non-administrative user can elevate their privileges to administrator status. Restricting administrative functions reduces exposure but is not a complete fix. This issue is...
CVE-2026-63339
The IXP Manager full-stack web application for managing Internet Exchange Points is vulnerable to a privilege escalation flaw in versions prior to 7.3.0 . An authenticated, non-administrative user can exploit improper input validation (CWE-20) and improper privilege management (CWE-269) to elevat...
CVE-2026-63338 IXP Manager has Broken Object-Level Authorization
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated user can view and edit a resource belonging to another user without authorization. The API-key edit/update path in ApiKeyController selects records by identifier without...
CVE-2026-63338
Prior to version 7.3.0 , IXP Manager (a web application for Internet Exchange Points) is vulnerable to an authorization bypass issue. The ApiKeyController 's edit/update path fails to verify that the user_id matches the caller when selecting records by identifier. This allows an authenticated use...
CVE-2026-63338: inex IXP-Manager: IXP Manager is a full-stack web application for managing Internet Exchange Points
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated user can view and edit a resource belonging to another user without authorization. The API-key edit/update path in ApiKeyController selects records by identifier without...
CVE-2026-63339: inex IXP-Manager: IXP Manager is a full-stack web application for managing Internet Exchange Points
IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authenticated, non-administrative user can elevate their privileges to administrator status. Restricting administrative functions reduces exposure but is not a complete fix. This issue is...
EUVD-2019-9487
Malware in sbrugna...
EUVD-2019-9489
Malware in sbrugna...
EUVD-2019-9488
Malware in sbrugna...
EUVD-2019-9486
Malware in sbrugna...
EUVD-2019-9491
Malware in sbrugna...
EUVD-2023-34561
Malicious code in bioql PyPI...
EUVD-2023-31528
Malicious code in bioql PyPI...
EUVD-2023-31531
Malicious code in bioql PyPI...
EUVD-2023-34560
Malicious code in bioql PyPI...