EUVD-2007-4046

Malware in sbrugna...

CVE-2025-37728: Insufficiently Protected Credentials

Insufficiently Protected Credentials in the Crowdstrike connector can lead to Crowdstrike credentials being leaked. A malicious user can access cached credentials from a Crowdstrike connector in another space by creating and running a Crowdstrike connector in a space to which they have access...

CVE-2025-40889: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters. An authenticated user with limited privileges, by issuing a specifically-crafted request, can potentially alter the structure and content of files in the /data folder...

CVE-2025-40888: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...

CVE-2025-40887: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data...

CVE-2025-3719: Incorrect Authorization

An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/o...

CVE-2025-3718: Improper Limitation of a Pathname to a Restricted Directory

A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with limited privileges can craft a malicious URL which, if visited by an authenticated victim, leads to a Cross-Site Scriptin...

Photon OS 4.0: Open PHSA-2025-4.0-0878

An update of the open package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0878. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2025-40886: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially exposing unauthorized data, altering...

Exploit for Improper Access Control in Oracle Concurrent_Processing

Oracle E-Business Suite RCE Scanner CVE-2025-61882 A fast,...

CVE-2025-9914: Authentication Bypass Using an Alternate Path or Channel

The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access. This could potentially affect the confidentiality of the application...

CVE-2025-9913: Improper Neutralization of Input During Web Page Generation

JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking...

CVE-2025-58591: Improper Limitation of a Pathname to a Restricted Directory

A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information...

CVE-2025-58590: Improper Limitation of a Pathname to a Restricted Directory

It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information...

CVE-2025-58589: Exposure of Sensitive Information to an Unauthorized Actor

When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application...

CVE-2025-58587: Improper Restriction of Excessive Authentication Attempts

The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials...

CVE-2025-58586: Observable Response Discrepancy

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...

CVE-2025-58585: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering...

CVE-2025-58584: Use of GET Request Method With Sensitive Query Strings

In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally...

CVE-2025-58583: Exposure of Sensitive System Information to an Unauthorized Control Sphere

The application provides access to a login protected H2 database for caching purposes. The username is prefilled...