517 matches found
CVE-2025-64686
In JetBrains YouTrack before 2025.3.104432 missing user principal cleanup led to reuse of incorrect authorization context...
EUVD-2025-75958
Malicious code in principalbird-smiletea npm...
EUVD-2025-80889
Malicious code in principalchameleon0xrequest npm...
EUVD-2025-62529
Malicious code in principalgrousez3n npm...
EUVD-2025-62530
Malicious code in principalcatsharkz3n npm...
EUVD-2025-62527
Malicious code in principalunicornrequirement npm...
EUVD-2025-62528
Malicious code in principalturtlez3n npm...
EUVD-2025-62526
Malicious code in principalzebraz3n npm...
Malicious code in principal_skink_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325a8ca4924e6de270823598b777102030cebc79474ea5dbb97646063166c7f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in principal-purple-bird (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b294be845ddc7b5b09f3c360a72a51276be6ba60e8fc84f0bee5af409dec2619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52640
Malicious code in principal-brown-takin npm...
EUVD-2025-52639
Malicious code in principal-purple-bird npm...
EUVD-2025-52638
Malicious code in principal-tomato-chinchilla npm...
EUVD-2025-57819
Malicious code in principalpheasantz3n npm...
CVE-2025-64686
JetBrains YouTrack prior to 2025.3.104432 is affected by CVE-2025-64686 due to missing user-principal cleanup, which can lead to reuse of an incorrect authorization context. The issue is addressed by upgrading to version 2025.3.104432 or later (mitigation).
PT-2025-46155
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.3.104432 Description A flaw exists in JetBrains YouTrack where incomplete user principal cleanup can result in the reuse of an incorrect authorization context. Recommendations Update to version...
BIT-WILDFLY-2022-0866
This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a RunAs principal. In particular, the org.jboss.as.ejb3.component.EJBComponent class has an incomingRunAsIdentity field. This field is used by the...
sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems
A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default configurations, the Kerberos local authentication plugin sssdkrb5localauthplugin is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an...
sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems
A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default configurations, the Kerberos local authentication plugin sssdkrb5localauthplugin is enabled, but a fallback to the an2ln plugin is possible. This fallback allows an...