51 matches found
CVE-2026-60104
Bitwarden Server before 2026.6.0 does not verify that the email in a POST /auth-requests/admin-request body belongs to the authenticated caller, allowing a low-privileged organization member to obtain another user's vault key and a victim-scoped access token by creating a Trusted Device Encryptio...
CVE-2026-60104
Bitwarden Server before 2026.6.0 is vulnerable to an authorization bypass in the admin/auth request flow. A low-privileged organization member can exploit a mismatch in the POST /auth-requests/admin-request handling to bind a Trusted Device Encryption request to an attacker-controlled public key,...
CVE-2026-60104 Bitwarden Server < 2026.6.0 Authorization Bypass via Admin Auth Request
Bitwarden Server before 2026.6.0 does not verify that the email in a POST /auth-requests/admin-request body belongs to the authenticated caller, allowing a low-privileged organization member to obtain another user's vault key and a victim-scoped access token by creating a Trusted Device Encryptio...
CVE-2026-60104 Bitwarden Server < 2026.6.0 Authorization Bypass via Admin Auth Request
Bitwarden Server before 2026.6.0 does not verify that the email in a POST /auth-requests/admin-request body belongs to the authenticated caller, allowing a low-privileged organization member to obtain another user's vault key and a victim-scoped access token by creating a Trusted Device Encryptio...
PT-2026-56552
Name of the Vulnerable Software and Affected Versions Bitwarden Server versions prior to 2026.6.0 Description An issue exists where the server fails to verify if the email address provided in the body of the 'POST /auth-requests/admin-request' endpoint belongs to the authenticated user. This allo...
UBUNTU-CVE-2026-50266
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set deviceowner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECTMANAGER without...
CVE-2026-50266
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set deviceowner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECTMANAGER without...
ClawJacked Flaw Lets Malicious Sites Hijack Local OpenClaw AI Agents via WebSocket
OpenClaw has fixed a high-severity security issue that, if successfully exploited, could have allowed a malicious website to connect to a locally running artificial intelligence AI agent and take over control. "Our vulnerability lives in the core system itself – no plugins, no marketplace, no...
EUVD-2025-10928
Malicious code in bioql PyPI...
EUVD-2025-10926
Malicious code in bioql PyPI...
EUVD-2023-29494
Malicious code in bioql PyPI...
Unspecified vulnerability in Apple macOS Sequoia and Apple macOS Sonoma (CNVD-2025-18437)
Apple macOS Sequoia and Apple macOS Sonoma are both operating systems from the American company Apple. A security vulnerability exists in Apple macOS Sequoia and Apple macOS Sonoma, which can be exploited by an attacker to launch arbitrary binaries on a trusted device...
Apple macOS 安全漏洞
Apple macOS Sequoia and Apple macOS Sonoma are both operating systems from the American company Apple. A security vulnerability exists in Apple macOS Sequoia and Apple macOS Sonoma, which can be exploited by an attacker to launch arbitrary binaries on a trusted device...
CVE-2025-43253
This issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to launch arbitrary binaries on a trusted device...
Dell Trusted Device Elevation of Privilege Vulnerability
Dell Trusted Device is an application from Dell USA. An elevation of privilege vulnerability exists in Dell Trusted Device, which stems from a misconfiguration of the default privileges and can be exploited by an attacker to elevate privileges...
Dell Trusted Device Backlink Vulnerability
Dell Trusted Device is an application from Dell USA. Dell Trusted Device suffers from a backlink vulnerability that stems from improper link resolution and can be exploited by an attacker to cause an elevation of privilege...
Dell Trusted Device Installed (Windows)
Binary data delltrusteddevicewininstalled.nbin...
Dell Trusted Device < 7.0.3.0 Multiple Vulnerabilities (DSA-2025-151)
The version of Dell Trusted Device installed on the remote host is prior to 7.0.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2025-151 advisory. - Dell Trusted Device, versions prior to 7.0.3.0, contain an Incorrect Default Permissions vulnerability. A low...
CVE-2025-29984
Dell Trusted Device, versions prior to 7.0.3.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2025-29983
Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...