4456 matches found
CVE-2025-56223: Allocation of Resources Without Limits or Throttling
A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service DoS via uploading an excessive number of files...
WordPress plugin PowerBI Embed Reports has a vulnerability related to information leakage.
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An information...
Keycloak error_description injection on error pages that can trigger phishing attacks
Keycloak’s account console accepts arbitrary text in the errordescription query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading messages e.g., fake support phone numbers or...
CVE-2025-56221: Improper Restriction of Excessive Authentication Attempts
A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack...
F5 BIG-IP security vulnerabilities
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A data tampering vulnerability exists in the TMM module of BIG-IP, which arises because undisclosed traffic can lead to data...
QNAP Qsync Central SQL Injection Vulnerability
QNAP Qsync Central is a private cloud synchronization service launched by Weilian QNAP, which is mainly used to achieve real-time synchronization and backup of files between devices, with functions similar to GoogleDrive, Dropbox and other cloud storage services, but with the data stored in the...
PT-2025-42361
Name of the Vulnerable Software and Affected Versions Creativeitem Academy LMS versions up to and including 5.13 Description The software uses predictable password reset tokens based on Base64 encoded templates and lacks rate limiting. This allows attackers to conduct brute force attacks to guess...
AI and the Future of American Politics
Two years ago, Americans anxious about the forthcoming 2024 presidential election were considering the malevolent force of an election influencer: artificial intelligence. Over the past several years, we have seen plenty of warning signs from elections worldwide demonstrating how AI can be used t...
WordPress AP Background plugin Arbitrary File Upload Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An arbitrary file upload vulnerability exists in the WordPress AP Background plugin, which stems from a lack of authorization and insufficient file validation in the...
Code-Projects E-Commerce Website SQL Injection Vulnerabilities
E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter prodid in file /pages/productaddqty.php. An attacker can exploit this vulnerability to execu...
Websoft HCM Automation Software XSS
The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...
ABB Ability zenon Auth Bypass DoS
The vulnerability of the software platform for operating data management in ABB Ability zenon relates to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to trigger service failures remotely...
Code-Projects E-Commerce Website SQL Injection Vulnerability
E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter orderid in file /pages/editorderdetails.php. An attacker can exploit this vulnerability to...
BELL-CVE-2023-53592
Bulletin has no description...
EUVD-2004-2550
Malware in sbrugna...
EUVD-2009-3463
Malware in sbrugna...
EUVD-2020-6058
Malware in sbrugna...
EUVD-2005-4682
Malware in sbrugna...