668 matches found
PT-2025-48413
A vulnerability has been found in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected by this issue is some unknown functionality of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/MachineInfoController.java of the component SSH Connection...
orion-ops 安全漏洞
orion-ops is a one-stop automated operation and maintenance and automated deployment platform by Jiahang Li, an individual developer. A security vulnerability exists in orion-ops, which stems from the misuse of the parameters host/sshPort/username/password/authType in the file...
PT-2025-48412
Name of the Vulnerable Software and Affected Versions orionsec orion-ops versions up to 5925824997a3109651bbde07460958a7be249ed1 Description A flaw exists in orionsec orion-ops. The issue is related to improper authorization caused by manipulation of the ID argument within the update function...
WordPress Orion SMS OTP Verification plugin elevation of privilege vulnerability
WordPress Orion SMS OTP Verification plugin is an authentication plugin for WordPress that enables user verification by sending a one-time password OTP via text message SMS. An elevation of privilege vulnerability exists in the WordPress Orion SMS OTP Verification plugin, which can be exploited b...
CVE-2025-9967
The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for...
CVE-2025-9967 Orion SMS OTP Verification <= 1.1.7 - Authentication Bypass via Account Takeover
The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for...
EUVD-2025-34545
The Orion SMS OTP Verification plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for...
CVE-2025-9967
CVE-2025-9967 concerns the WordPress plugin Orion SMS OTP Verification. The vulnerability is an authentication bypass enabling privilege escalation via account takeover in versions
WordPress Orion SMS OTP Verification plugin <= 1.1.7 - Authentication Bypass via Account Takeover vulnerability
Authentication Bypass via Account Takeover vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Orion SMS OTP Verification versions = 1.1.7...
EUVD-2021-21868
Malware in sbrugna...
EUVD-2019-7586
Malware in sbrugna...
EUVD-2013-2760
Malware in sbrugna...
EUVD-2021-21855
Malware in sbrugna...
EUVD-2021-15337
Malware in sbrugna...
EUVD-2019-4443
Malware in sbrugna...
EUVD-2020-20363
Malware in sbrugna...
EUVD-2019-7585
Malware in sbrugna...
EUVD-2006-0822
Malware in sbrugna...