434 matches found
CVE-2025-65034 Rallly Improper Authorization Allows Reopening of Any Finalized Poll via Public pollId
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization vulnerability allows any authenticated user to reopen finalized polls belonging to other users by manipulating the pollId parameter. This can disrupt events managed by other users and...
CVE-2025-65034 Rallly Improper Authorization Allows Reopening of Any Finalized Poll via Public pollId
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization vulnerability allows any authenticated user to reopen finalized polls belonging to other users by manipulating the pollId parameter. This can disrupt events managed by other users and...
EUVD-2025-198224
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference IDOR vulnerability in the poll duplication endpoint /api/trpc/polls.duplicate allows any authenticated user to duplicate polls they do not own by modifying the pollId parameter...
CVE-2025-65020 Rallly Has Unauthorized Poll Duplication via Insecure Direct Object Reference (IDOR)
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference IDOR vulnerability in the poll duplication endpoint /api/trpc/polls.duplicate allows any authenticated user to duplicate polls they do not own by modifying the pollId parameter...
CVE-2025-65020 Rallly Has Unauthorized Poll Duplication via Insecure Direct Object Reference (IDOR)
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference IDOR vulnerability in the poll duplication endpoint /api/trpc/polls.duplicate allows any authenticated user to duplicate polls they do not own by modifying the pollId parameter...
PT-2025-47501
Name of the Vulnerable Software and Affected Versions Rallly versions prior to 4.5.4 Description Rallly is a scheduling and collaboration tool. An Insecure Direct Object Reference IDOR exists in the poll duplication endpoint /api/trpc/polls.duplicate. An authenticated user can bypass access...
PT-2025-47511
Name of the Vulnerable Software and Affected Versions Rallly versions prior to 4.5.4 Description An authorization issue exists in Rallly, a scheduling and collaboration tool. An authenticated user can manipulate the pollId parameter to reopen finalized polls owned by other users. This can disrupt...
CVE-2025-12620
CVE-2025-12620 affects the WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls (versions up to and including 6.0.7). The root cause is insufficient escaping and inadequate preparation of the SQL query used with the filterbyauthor parameter, enabling an authenticated attacker ...
WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...
Malicious code in lomi-fis-fakiugabas (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8ced8477ad96bccf986313bc37c6914b558d9c6b9adaef7bacb48942e2f16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-131128 Malicious code in vitreous_tiger_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b479e9e3fefe75f0c3d4239ebb8ade45f6ecf77cb59a0710855c2dd69d3a559e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in surya-dodol87-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436c47eca413a33229e464c6aea9f5dd3b6c603171940dfb73dda9eaf9b4696c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in surprising_rook_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a57e925b3bf85e9f8ef3d28681ad0d84ebe7e6a630eeea214deac139a1cac9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sore-coffee-harrier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653ad8bbc54bf5eb77dc6dfa2bcab629e5e3875b5ed6edca1df603293f664d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-63897 Malicious code in kurnia-nasi93-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c4d57ea5a73864077d738a44129b20cd1ee5d776bab0eb4a2bf9479601af08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2015-9192
Malware in sbrugna...
EUVD-2016-1927
Malware in sbrugna...
EUVD-2008-7005
Malware in sbrugna...