234 matches found
CVE-2025-31997 HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR)
HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References IDOR. An attacker can bypass authorization and access resources in the system directly, for example database records or files...
CVE-2025-31997 HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR)
HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References IDOR. An attacker can bypass authorization and access resources in the system directly, for example database records or files...
CVE-2025-31993 HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)
HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery SSRF. An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server...
CVE-2025-31993
CVE-2025-31993 : HCL Unica Centralized Offer Management is vulnerable to a Server-Side Request Forgery (SSRF) due to improper input validation. An attacker can submit malicious input to a server-hosted application to trigger SSRF. The NVD entry assigns CVSSv3.1 base metrics of AV:N/AC:L/PR:N/UI:N...
CVE-2025-31993 HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)
HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery SSRF. An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server...
PT-2025-41704
Name of the Vulnerable Software and Affected Versions HCL Unica Centralized Offer Management affected versions not specified Description HCL Unica Centralized Offer Management is susceptible to issues with unhandled exceptions, potentially revealing sensitive information. An attacker could levera...
PT-2025-41702
Name of the Vulnerable Software and Affected Versions HCL Unica Centralized Offer Management affected versions not specified Description The software is susceptible to a Server-Side Request Forgery SSRF issue. This occurs due to improper input validation, allowing an attacker to submit malicious...
PT-2025-41703
Name of the Vulnerable Software and Affected Versions HCL Unica Centralized Offer Management affected versions not specified Description The software is susceptible to Insecure Direct Object References IDOR. This allows an attacker to bypass authorization controls and directly access resources...
HCL Unica Centralized Offer Management 安全漏洞
HCL Unica Centralized Offer Management is a module of HCL India responsible for the unified management and distribution of offers. A security vulnerability exists in HCL Unica Centralized Offer Management, which stems from mishandling of exceptions and could lead to disclosure of sensitive...
HCL Unica Centralized Offer Management 安全漏洞
HCL Unica Centralized Offer Management is a module of HCL India responsible for the unified management and distribution of offers. A security vulnerability exists in HCL Unica Centralized Offer Management that originates from an insecure direct object reference that could lead to unauthorized...
HCL Unica Centralized Offer Management 安全漏洞
HCL Unica Centralized Offer Management is a module of HCL India responsible for the unified management and distribution of offers. A security vulnerability exists in HCL Unica Centralized Offer Management that stems from improper input validation and could lead to a server-side request forgery...
EUVD-2020-6200
Malware in sbrugna...
EUVD-2023-45305
Malicious code in bioql PyPI...
EUVD-2024-23156
Malicious code in bioql PyPI...
PT-2025-39041
Name of the Vulnerable Software and Affected Versions WP Swings Upsell Order Bump Offer for WooCommerce versions through 3.0.7 Description The software contains a flaw related to improper input handling during web page creation, leading to a potential Stored Cross-Site Scripting XSS issue. This...
Watch out for the “We are hiring” remote online evaluator message scam
Looking at our team’s recent text messages, you’d think that remote online evaluators are in high demand right now. Several members of our team have received the almost exact same job offer scam texts. The content of the messages is almost identical, but there is a variation in background images...
Malicious code in offer-ocean-dead (npm)
The package offer-ocean-dead was found to contain malicious code...
MAL-2025-45420 Malicious code in offer-ocean-dead (npm)
The package offer-ocean-dead was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2020-14034
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in janus-gateway aka Janus WebRTC Server through 0.10.0. janusgetcodecfrompt in utils.c has a Buffer Overflow via long value in an SDP...