4045 matches found
CVE-2025-36361 IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA
IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization...
EUVD-2025-35825
IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actions on customer defined resources due to missing authorization...
CVE-2025-10749
CVE-2025-10749 describes a vulnerability in the Microsoft Azure Storage for WordPress plugin (all versions up to 4.5.1) where missing capability checks on the azure-storage-media-replace AJAX action allow authenticated users with subscriber-level access or higher to delete arbitrary media in the ...
Security Bulletin: IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA (CVE-2025-36361)
Summary IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA. Vulnerability Details CVEID:CVE-2025-36361 DESCRIPTION: IBM App Connect Enterprise could allow an authenticated user to perform unauthorized actions on customer defined resources...
PT-2025-43607
Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.17 IBM App Connect Enterprise versions 13.0.1.0 through 13.0.4.2 Description An authenticated user may be able to perform unauthorized actions on customer defined resources due to...
CVE-2025-11952 Stored Cross-Site Scripting (XSS) in Oct8ne Chatbot
Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...
EUVD-2025-34754
An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing server-level...
EUVD-2025-34122
Due to a Cross-Site Request Forgery CSRF vulnerability in SAP NetWeaver Application Server for ABAP, an authenticated attacker could initiate transactions directly via the session manager, bypassing the first transaction screen and the associated authorization check. This vulnerability could allo...
PT-2025-41840
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for ABAP affected versions not specified Description A Cross-Site Request Forgery CSRF issue exists in SAP NetWeaver Application Server for ABAP. An authenticated attacker may be able to initiate transactions...
EUVD-2020-18693
Malware in sbrugna...
EUVD-2018-12058
Malware in sbrugna...
EUVD-2005-3616
Malware in sbrugna...
EUVD-2019-10472
Malware in sbrugna...
EUVD-2020-25915
Malware in sbrugna...
EUVD-2008-3187
Malware in sbrugna...
EUVD-2007-0650
Malware in sbrugna...
EUVD-2020-26189
Malware in sbrugna...
EUVD-2016-10374
Malware in sbrugna...