118 matches found
EUVD-2026-10063
Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 are vulnerable to Server-Side Request Forgery SSRF via attachment URL loading. During board import in Wekan, attachment URLs from user-supplied JSON data are fetched directly by the server without any URL validation or...
PT-2026-23744
Wekan is an open source kanban tool built with Meteor. Versions 8.32 and 8.33 are vulnerable to Server-Side Request Forgery SSRF via attachment URL loading. During board import in Wekan, attachment URLs from user-supplied JSON data are fetched directly by the server without any URL validation or...
EUVD-2017-8039
Malware in sbrugna...
EUVD-2017-18181
Malware in sbrugna...
EUVD-2015-1039
Malware in sbrugna...
EUVD-2017-9234
Malware in sbrugna...
Hidden Vulnerabilities of Project Management Tools & How FluentPro Backup Secures Them
Every day, businesses, teams, and project managers trust platforms like Trello, Asana, etc., to collaborate and manage tasks. But what happens when that trust is broken? According to a recent report by Statista, the average cost of a data breach worldwide was about $4.88 million. Also, in 2024, t...
MAL-2025-37184 Malicious code in trello.cards (npm)
The package trello.cards was found to contain malicious code...
MAL-2025-37183 Malicious code in trello-power-up-tutorial-part-one (npm)
The package trello-power-up-tutorial-part-one was found to contain malicious code...
Malicious code in trello-power-up-tutorial-part-one (npm)
The package trello-power-up-tutorial-part-one was found to contain malicious code...
Malicious code in trello.cards (npm)
The package trello.cards was found to contain malicious code...
CVE-2015-10023
A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/server/srv.go. The manipulation of the argument num leads to sql injection. The patch is named a1f1754933fbf21e2221fbc671c81a47de6a04ef. It is recommended to app...
Trello Data Breach: Hacker Dumps Personal Info of Millions of Users
The hacker behind the Trello data breach claims the data was stolen in January 2024 and can be…...
Malicious code in bpa-trello-dashboard (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1837 Malicious code in bpa-trello-dashboard (npm)
--- -= Per source details. Do not edit below this line.=-...
“The mother of all breaches”: 26 billion records found online [Updated]
Security researchers have discovered billions of exposed records online, calling it the "mother of all breaches". However, the dataset doesnt seem to be from one single data breach, but more a compilation of multiple breaches. These sets are often created by data enrichment companies. Data...
WordPress jav's – WooCommerce and Trello integration WooTrello Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)
Software jav's – WooCommerce and Trello integration WooTrello Type Plugin Vulnerable versions = 3.2.5 Fixed in 3.2.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bc6f83d83fa4...
Atlassian Jira < 7.6.1 Xss In Trello Board Importer Resource
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.6.1. It is, therefore, affected by a vulnerability which permits remote attackers who can convince a Jira administrator to import their Trello board to inject arbitrary HTML...
No check for active sequencer
Lines of code Vulnerability details Impact The protocol will operate at the previous stale rates. Proof of Concept Chainlink recommends that all Optimistic L2 oracles consult the Sequencer Uptime Feed to ensure that the sequencer is live before trusting the data returned by the oracle, even if...
CVE-2015-10023
A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/server/srv.go. The manipulation of the argument num leads to sql injection. The patch is named a1f1754933fbf21e2221fbc671c81a47de6a04ef. It is recommended to app...