5673 matches found
Nextcloud: Predictable proposal participant tokens enable unauthorized access and vote submission
A vulnerability was discovered in predictable proposal participant tokens, which enabled unauthorized access and vote submission...
Nextcloud: BOLA/IDOR in Out-of-Office API allows any authenticated user to read other users' absence data
Summary The Out-of-Office OOO API endpoints at /ocs/v2.php/apps/dav/api/v1/outOfOffice/userId and /ocs/v2.php/apps/dav/api/v1/outOfOffice/userId/now suffer from a Broken Object Level Authorization BOLA vulnerability. Any authenticated user can retrieve the out-of-office data of any other user by...
EUVD-2017-1241
Malware in sbrugna...
EUVD-2019-15037
Malware in sbrugna...
EUVD-2021-19562
Malware in sbrugna...
EUVD-2021-24187
Malware in sbrugna...
EUVD-2021-10012
Malware in sbrugna...
EUVD-2021-10013
Malware in sbrugna...
EUVD-2021-19495
Malware in sbrugna...
EUVD-2021-19474
Malware in sbrugna...
EUVD-2020-29035
Malware in sbrugna...
EUVD-2020-29064
Malware in sbrugna...
EUVD-2020-29161
Malware in sbrugna...
EUVD-2021-10034
Malware in sbrugna...
EUVD-2020-29149
Malware in sbrugna...
EUVD-2021-19512
Malware in sbrugna...
EUVD-2021-19503
Malware in sbrugna...
EUVD-2019-15035
Malware in sbrugna...