37 matches found
Download Monitor <= 4.7.60 - Sensitive Information Exposure
The Download Monitor plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.7.60 via REST API. This can allow unauthenticated attackers to extract sensitive data including user reports, download reports, and user data including email, role, id and...
CVE-2020-12477
The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forwarded-For client HTTP header to the getIp function...
CVE-2019-7950
An access control bypass vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An unauthenticated user can bypass access controls via REST API calls to assign themselves to an arbitrary company, thereby gaining read access to potentially...
EUVD-2020-2730
Malware in sbrugna...
EUVD-2019-0267
Malware in sbrugna...
EUVD-2014-0212
Malware in sbrugna...
EUVD-2013-0232
Malware in sbrugna...
EUVD-2014-3492
Malware in sbrugna...
EUVD-2017-16564
Malware in sbrugna...
EUVD-2022-32616
Malicious code in bioql PyPI...
EUVD-2024-25318
Malicious code in bioql PyPI...
EUVD-2025-21036
Malicious code in bioql PyPI...
EUVD-2023-46066
Malicious code in bioql PyPI...
EUVD-2024-17212
Malicious code in bioql PyPI...
EUVD-2024-16755
Malicious code in bioql PyPI...
EUVD-2025-18684
Malicious code in bioql PyPI...
EUVD-2024-32861
Malicious code in bioql PyPI...
EUVD-2025-16349
Malicious code in bioql PyPI...
CVE-2025-54554
tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive information about the underlying SQL queries and database structure...
CVE-2025-27505
GeoServer is an open source server that allows users to share and edit geospatial data. It is possible to bypass the default REST API security and access the index page. The REST API security handles rest and its subpaths but not rest with an extension e.g., rest.html. The REST API index can...