EUVD-2012-2350

Malware in sbrugna...

EUVD-2019-1074

Malware in sbrugna...

EUVD-2015-7760

Malware in sbrugna...

EUVD-2014-0153

Malware in sbrugna...

EUVD-2021-0665

Malware in sbrugna...

EUVD-2023-54164

Malicious code in bioql PyPI...

EUVD-2025-19169

Malicious code in bioql PyPI...

EUVD-2025-10842

Malicious code in bioql PyPI...

EUVD-2022-1688

Malicious code in bioql PyPI...

EUVD-2023-58276

Malicious code in bioql PyPI...

EUVD-2023-44281

Malicious code in bioql PyPI...

EUVD-2025-5486

Malicious code in bioql PyPI...

EUVD-2023-54111

Malicious code in bioql PyPI...

EUVD-2023-54021

Malicious code in bioql PyPI...

EUVD-2024-44445

Malicious code in bioql PyPI...

Improper Authorization

github.com/mattermost/mattermost-server is vulnerable to Improper Authorization. The vulnerability is due to insufficient validation of authorization for team scheme role modifications, which allows an attacker Team Admins to demote Team Members to Guests via the affected API endpoint...

GO-2025-3902 Mattermost Fails to Properly Validate Team Role Modification in github.com/mattermost/mattermost-server

Mattermost Fails to Properly Validate Team Role Modification in github.com/mattermost/mattermost-server...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost version 10.5.8 and prior versions 10.5.x and version 9.11.17 and prior versions 9.11.x, which stems from failure to properly validate authorization for tea...

CVE-2025-2938 Business Logic Errors in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed authenticated users to gain elevated project privileges by requesting access to projects where role modifications during the approval...

CVE-2023-4140

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 7.9.8 due to insufficient restriction on the 'getheadervalues' function. This makes it possible for authenticated attackers, with minimal permissions such as an author, if the...