5227 matches found
CVE-2025-9955
An improper access control vulnerability exists in WSO2 Enterprise Integrator product due to insufficient permission restrictions on internal SOAP admin services related to system logs and user-store configuration. A low-privileged user can access log data and user-store configuration details tha...
CVE-2025-9804 Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs
An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing server-level...
CVE-2025-5946 RCE via the poller reload feature available only to user with high privilege
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Centreon Infra Monitoring Poller reload setup in the configuration modules allows OS Command Injection. On the poller parameters page, a user with high privilege is able to concatenate custom...
EUVD-2025-34141
The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...
EUVD-2025-33730
SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...
CVE-2025-62292
In SonarQube before 25.6, 2025.3 Commercial, and 2025.1.3 LTA, authenticated low-privileged users can query the /api/v2/users-management/users endpoint and obtain user fields intended for administrators only, including the email addresses of other accounts...
CVE-2025-60306
The code-projects Simple Car Rental System 1.0 is affected by a permission bypass vulnerability. This flaw allows low-privileged users to forge high-privilege sessions , enabling them to perform sensitive operations within the application. No specific remediation or patch version is currently pro...
EUVD-2021-11039
Malware in sbrugna...
EUVD-2021-11276
Malware in sbrugna...
EUVD-2021-11425
Malware in sbrugna...
EUVD-2021-11570
Malware in sbrugna...
EUVD-2021-11314
Malware in sbrugna...
EUVD-2021-11519
Malware in sbrugna...
EUVD-2021-11513
Malware in sbrugna...
EUVD-2021-11619
Malware in sbrugna...
EUVD-2021-11250
Malware in sbrugna...
EUVD-2021-11557
Malware in sbrugna...
EUVD-2021-11243
Malware in sbrugna...