91 matches found
Token Revocation Bypass
Keycloak is vulnerable to a token revocation bypass vulnerability. The vulnerability is due to an application-specific “not-before” token revocation policy being silently ignored when an older, non-zero realm-level policy exists, which allows an attacker to continue using previously issued tokens...
CVE-2025-61647 UserInfoCard: Don't allow access to information about users who are suppressed if you don't have suppressor rights
Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Api/Rest/Handler/UserInfoHandler.Php. This issue affects CheckUser: from a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4...
CVE-2022-27960
Insecure permissions configured in the userid parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information...
CanalDenuncia App 安全漏洞
CanalDenuncia App is a reporting channel application from the Spanish company CanalDenuncia. A security vulnerability exists in CanalDenuncia App, which stems from a lack of authorization checking, which allows an attacker to send a POST request to access other users' information via the paramete...
CVE-2025-60800
Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request...
EUVD-2018-16012
Malware in sbrugna...
EUVD-2019-13480
Malware in sbrugna...
EUVD-2020-19678
Malware in sbrugna...
EUVD-2022-27798
Malicious code in bioql PyPI...
EUVD-2025-1847
Malicious code in bioql PyPI...
EUVD-2022-0367
Malicious code in bioql PyPI...
EUVD-2022-35871
Malicious code in bioql PyPI...
EUVD-2024-46994
Malicious code in bioql PyPI...
EUVD-2025-7030
Malicious code in bioql PyPI...
EUVD-2024-53470
Malicious code in bioql PyPI...
EUVD-2023-43935
Malicious code in bioql PyPI...
EUVD-2024-53469
Malicious code in bioql PyPI...
EUVD-2025-5456
Malicious code in bioql PyPI...