90 matches found
Authentication Bypass
s3-proxy is vulnerable to Authentication Bypass. The vulnerability is due to inconsistent URL path interpretation between the authentication middleware and bucket handler, which allows an attacker to bypass access controls and perform unauthorized operations on protected S3 objects...
CVE-2023-45660
Nextcloud mail is an email app for the Nextcloud home server platform. In affected versions a missing check of origin, target and cookies allows for an attacker to abuse the proxy endpoint to denial of service a third server. It is recommended that the Nextcloud Mail is upgraded to 2.2.8 or 3.3.0...
CVE-2025-66631
CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer NDCS and is vulnerable to remote code execution during deserialization...
OpenVPN 安全漏洞
OpenVPN is a software package for creating encrypted tunnels for Virtual Private Networks VPNs from US-based OpenVPN, which uses the OpenSSL library to encrypt data and control information, and allows created VPNs to be authenticated using public keys, electronic certificates, or...
CVE-2025-59514 Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
...
CVE-2025-59514 Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
...
KLA90057 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code, read local files, cause denial of service. Below is a...
EUVD-2024-34735
Malicious code in bioql PyPI...
EUVD-2023-31258
Malicious code in bioql PyPI...
EUVD-2021-30704
Malicious code in bioql PyPI...
EUVD-2022-26875
Malicious code in bioql PyPI...
EUVD-2024-37891
Malicious code in bioql PyPI...
EUVD-2021-30706
Malicious code in bioql PyPI...
EUVD-2021-28253
Malicious code in bioql PyPI...
EUVD-2025-13934
Malicious code in bioql PyPI...
EUVD-2023-31255
Malicious code in bioql PyPI...
EUVD-2024-30727
Malicious code in bioql PyPI...
EUVD-2021-30705
Malicious code in bioql PyPI...
EUVD-2022-26872
Malicious code in bioql PyPI...
CVE-2021-38698
HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2...