Lucene search
+L

344 matches found

Github Security Blog
Github Security Blog
•added 2025/12/10 6:20 p.m.•20 views

Ibexa User Bundle is missing password change validation

Impact The vulnerability is in the password change dialog in the back office. During the transition from v4 to v5 a mistake was made in the validation code which caused the validation of the previous password to not run as expected. This made it possible for a logged in user to change password in...

8.5CVSS7AI score0.00142EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2025/12/03 2:35 p.m.•46 views

BIT-ACTIVEMQ-2021-26117 ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind

The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error...

7.5CVSS7.7AI score0.1133EPSS
SaveExploits0References22
OSV
OSV
•added 2025/11/18 12:00 a.m.•11 views

CVE-2025-63800

The password change endpoint in Open Source Point of Sale 3.4.1 allows users to set their account password to an empty string due to missing server-side validation. When an authenticated user omits or leaves the password and repeatpassword parameters empty in the password change request, the...

7.5CVSS6.8AI score
SaveExploits0References5
NVD
NVD
•added 2025/10/30 4:15 p.m.•13 views

CVE-2025-61115

ABC Fine Wine & Spirits Android App version v.11.27.5 and before package name com.cta.abcfinewineandspirits, developed by ABC Liquors, Inc., contains an improper access control vulnerability in its login mechanism. The application does not properly validate user passwords during authentication,...

7.5CVSS0.00343EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/30 12:00 a.m.•7 views

CVE-2025-61115

ABC Fine Wine & Spirits Android App version v.11.27.5 and before package name com.cta.abcfinewineandspirits, developed by ABC Liquors, Inc., contains an improper access control vulnerability in its login mechanism. The application does not properly validate user passwords during authentication,...

6.1AI score0.00343EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/30 12:00 a.m.•36 views

CVE-2025-61115

The ABC Fine Wine & Spirits Android App (package name com.cta.abcfinewineandspirits), developed by ABC Liquors, Inc., contains an improper access control vulnerability in its login mechanism affecting version v.11.27.5 and before . The root cause is a failure to properly validate user passwords d...

6.1AI score0.00343EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/30 12:00 a.m.•12 views

PT-2025-44420

Name of the Vulnerable Software and Affected Versions ABC Fine Wine & Spirits Android App versions v.11.27.5 and before Description The ABC Fine Wine & Spirits Android App does not properly validate user passwords during authentication, potentially allowing attackers to bypass login checks and...

7.5CVSS6.5AI score0.00343EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/10/30 12:00 a.m.•17 views

CVE-2025-61115

ABC Fine Wine & Spirits Android App version v.11.27.5 and before package name com.cta.abcfinewineandspirits, developed by ABC Liquors, Inc., contains an improper access control vulnerability in its login mechanism. The application does not properly validate user passwords during authentication,...

0.00343EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2018-2650

Malware in sbrugna...

9.8CVSS9.5AI score0.01282EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2012-5343

Malware in sbrugna...

5CVSS6.3AI score0.02452EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2006-0661

Malware in sbrugna...

7.5CVSS6.4AI score0.01843EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2021-0782

Malware in sbrugna...

8.1CVSS6.9AI score0.07225EPSS
SaveExploits1References61
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2012-2359

Malware in sbrugna...

5CVSS6.4AI score0.01504EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2010-0252

Malware in sbrugna...

2.1CVSS6.4AI score0.00483EPSS
SaveExploits1References14
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2010-0255

Malware in sbrugna...

4.6CVSS6.4AI score0.00372EPSS
SaveExploits0References13
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2010-1860

Malware in sbrugna...

7.5CVSS6.1AI score0.08954EPSS
SaveExploits3References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2014-0067

Malware in sbrugna...

4.3CVSS6.2AI score0.01439EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2010-0258

Malware in sbrugna...

4.6CVSS6.4AI score0.00394EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2021-1963

Malware in sbrugna...

5.9CVSS7.1AI score0.06252EPSS
SaveExploits0References32
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2021-30329

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.01169EPSS
SaveExploits0References1
Rows per page
Query Builder