144 matches found
CVE-2026-50199 Wallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refresh
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/updateexchange.php loads the first Fixer/API Layer credential globally instead of loading the credential for the authenticated user. As a result, a normal authenticated user without...
CVE-2026-50199 Wallos: Cross-user Fixer/API Layer credential consumption in exchange-rate refresh
Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, endpoints/currency/updateexchange.php loads the first Fixer/API Layer credential globally instead of loading the credential for the authenticated user. As a result, a normal authenticated user without...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: sbomqs, metacontroller, osv-scanner, vault-benchmark, actions-runner-controller, crossplane-provider-aws-sns, container-object-storage-interface, crossplane-provider-aws-cloudfront, stakater-reloader, calico, terraform-mcp-server, authservice, octo-sts, croc,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: nri-apache, terraform-mcp-server, controller-gen, wait-for-port, tkn, libnvidia-container, k8sgpt, kapp, ip-masq-agent, k8sgateway, tflint, k3s, kubernetes-dashboard-auth, opa, yunikorn-k8shim, cluster-api-provider-vsphere, rancher-system-agent,...
CVE-2026-54307: Incorrect Authorization
n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflow could reference credentials they do not own via specific public API endpoints. Credential ownership checks were only enforced partially leading to...
PT-2026-41562
Joomla jCart for OpenCart 2.3.0.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information without authentication. Attackers can craft malicious HTML forms targeting endpoints , and to change user credentials, passwords, and affiliate account...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: keda, neuvector-scanner, contour, pulumi-language-java, go-discover, terraform-mcp-server, terraform-provider-aws, kbld, terraform-provider-random, victoriametrics, cue, custom-pod-autoscaler-operator, step-issuer, cadvisor, memcached-exporter,...
EUVD-2002-0232
Malware in sbrugna...
EUVD-2020-18479
Malware in sbrugna...
EUVD-2020-21870
Malware in sbrugna...
EUVD-2020-20574
Malware in sbrugna...
EUVD-2018-0911
Malware in sbrugna...
EUVD-2020-19128
Malware in sbrugna...
EUVD-2018-0939
Malware in sbrugna...
EUVD-2020-27800
Malware in sbrugna...
EUVD-2015-5163
Malware in sbrugna...
EUVD-2020-13295
Malware in sbrugna...
EUVD-2006-2768
Malware in sbrugna...