90 matches found
EUVD-2026-77213
Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla 7.0.0, Snippets Pro extension for Joomla 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the...
CVE-2026-42017
An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions...
CVE-2026-42017
Technical details (affected products/versions, root cause, exploitability) are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2026-8823
Mattermost versions 11.7.x = 11.7.0, 10.11.x = 10.11.17 fail to validate bot targets when demoting users to guests which allows a lower-privileged administrator to degrade arbitrary bot accounts via the standard demote-user API.. Mattermost Advisory ID: MMSA-2026-00669...
Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This vulnerability exists because the affected software does not properly validate...
CVE-2025-58386
In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not subject to proper server-side authorization checks. A Power User can intercept and modify this parameter to assign the Administrator role to other existing lower-privileged accounts, or invite a new...
CVE-2025-58386
Terminalfour 8–8.4.1.1 contains a server-side authorization flaw in the userLevel parameter of the user management function. A Power User can intercept and modify this parameter to elevate existing accounts to Administrator or invite new accounts with escalated privileges, and can also change the...
EUVD-2025-37220
Nagios Log Server versions prior to 2024R2.0.3 contain an incorrect authorization vulnerability that allows non-administrator users to delete global dashboards. The application did not correctly enforce authorization checks for the global dashboard deletion workflow, enabling lower-privileged use...
EUVD-2021-11176
Malware in sbrugna...
EUVD-2021-11181
Malware in sbrugna...
EUVD-2021-11122
Malware in sbrugna...
EUVD-2021-11173
Malware in sbrugna...
EUVD-2021-11182
Malware in sbrugna...
EUVD-2021-24797
Malware in sbrugna...
EUVD-2021-11172
Malware in sbrugna...
EUVD-2021-11187
Malware in sbrugna...
EUVD-2021-11179
Malware in sbrugna...
EUVD-2021-26248
Malware in sbrugna...