CVE-2025-64064

The Primakon Pi Portal version 1.0.18 contains a privilege escalation vulnerability in the /api/v2/pp_users endpoint. Due to weak access controls , the system fails to adequately verify user permissions when processing a PATCH request intended to modify the PP_SECURITY_PROFILE_ID . An attacker wi...

PT-2025-48072

Name of the Vulnerable Software and Affected Versions Primakon Pi Portal version 1.0.18 Description The /api/v2/pp users endpoint in Primakon Pi Portal does not properly verify user permissions when handling PATCH requests to modify the PP SECURITY PROFILE ID. This allows a low-level user to...

CVE-2025-64064

Primakon Pi Portal 1.0.18 /api/v2/ppusers endpoint fails to adequately check user permissions before processing a PATCH request to modify the PPSECURITYPROFILEID. Because of weak access controls any low level user can use this API and change their permission to Administrator by using...

EUVD-2016-6913

Malware in sbrugna...

EUVD-2019-1106

Malware in sbrugna...

EUVD-2020-20217

Malware in sbrugna...

EUVD-2021-10118

Malware in sbrugna...

EUVD-2022-37307

Malicious code in bioql PyPI...

EUVD-2025-24640

Malicious code in bioql PyPI...

CVE-2025-59589

creationtimestamp| type| source ---|---|--- 2025-09-22 22:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzhgt3ippg2g...

CVE-2025-53771

creationtimestamp| type| source ---|---|--- 2025-07-20 06:03:24+00:00| seen| https://vulnerability.circl.lu/bundle/7eb6b389-20dd-404f-90c4-314ed370fcc5 2025-07-21 02:16:35+00:00| seen| https://bsky.app/profile/threatintel.microsoft.com/post/3lugwccoukc2q 2025-07-21 02:31:17+00:00| seen|...

CVE-2025-41668

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...

CVE-2025-41668

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...

CVE-2025-41668 Phoenix Contact: File access due to the replacement of a critical file used by the service security-profile

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...

CVE-2025-41668 Phoenix Contact: File access due to the replacement of a critical file used by the service security-profile

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...

CVE-2025-53384

creationtimestamp| type| source ---|---|--- 2025-06-28 05:06:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsnf2yvt6v2a...

CVE-2025-5106

creationtimestamp| type| source ---|---|--- 2025-05-23 16:15:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptzobiysv2w...

CVE-2022-34352

IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. IBM X-Force ID: 230403...

CVE-2022-34351

IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains. IBM X-Force ID: 230402...

CVE-2021-23000

On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP security profile associated with a virtual server, in rare instances, a specific sequence of malicious requests may...