20112 matches found
PT-2025-45043
Name of the Vulnerable Software and Affected Versions Mantis Bug Tracker versions 2.27.1 and below Description Mantis Bug Tracker contains a flaw in its authentication code due to the use of loose comparison == instead of strict comparison ===. PHP type juggling can cause certain MD5 hashes...
EUVD-2025-37521
MantisBT unauthorized disclosure of private project column configuration...
Improper Authorization
Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Improper Authorization due to insufficient access-level checks in the manageconfigcolumnspage.php. An attacker can retrieve configuration details from private projects by using the 'Copy From'...
MantisBT unauthorized disclosure of private project column configuration
Impact Due to insufficient access-level checks, any non-admin user having access to manageconfigcolumnspage.php typically project managers having MANAGER role can use the Copy From action to retrieve the columns configuration from a private project they have no access to. Access to the reverse...
EUVD-2025-37522
MantisBT lacks verification when changing a user's email address...
MantisBT Vulnerable to Denial-of-Service (DoS) via Excessive Note Length
A lack of server-side validation for note length in MantisBT allows attackers to permanently corrupt issue activity logs by submitting extremely long notes tested with 4,788,761 characters. Once such a note is added: Impact - The entire activity stream becomes unviewable UI fails to render. - New...
PT-2025-44804
Name of the Vulnerable Software and Affected Versions Mantis Bug Tracker versions 2.27.1 and below Description Mantis Bug Tracker is an open source issue tracker. When a user modifies their profile to update their email address, the system saves the change without verifying ownership. This can le...
EUVD-2008-3092
Malware in sbrugna...
EUVD-2005-3335
Malware in sbrugna...
EUVD-2005-3334
Malware in sbrugna...
EUVD-2005-4514
Malware in sbrugna...
EUVD-2006-0846
Malware in sbrugna...
EUVD-2005-3090
Malware in sbrugna...
EUVD-2006-1578
Malware in sbrugna...
EUVD-2005-3338
Malware in sbrugna...
EUVD-2002-1098
Malware in sbrugna...
EUVD-2002-1102
Malware in sbrugna...
EUVD-2002-1104
Malware in sbrugna...