2213 matches found
EUVD-2022-35631
Malicious code in bioql PyPI...
EUVD-2022-45987
Malicious code in bioql PyPI...
EUVD-2024-18103
Malicious code in bioql PyPI...
EUVD-2025-19011
Malicious code in bioql PyPI...
EUVD-2022-28947
Malicious code in bioql PyPI...
Observable Discrepancy
Overview Affected versions of this package are vulnerable to Observable Discrepancy in the authentication process, when Multi-Attribute Login is enabled. An attacker can determine the existence of valid usernames by observing distinct error messages returned by the system in response to login...
PT-2025-39521
Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A username enumeration issue exists when Multi-Attribute Login is enabled. The system provides a different response for existing and non-existing usernames, regardless of the validate...
Exploit for Path Traversal in Fortinet Fortiproxy
🛡️ CVE-2018-13379 - Fortinet SSL VPN Vulnerability --- 🔍...
SMSEagle 跨站脚本漏洞
SMSEagle is a specialized hardware SMS gateway software for sending and receiving SMS messages from SMSEagle. A cross-site scripting vulnerability exists in SMSEagle versions prior to 6.11, which stems from an unauthenticated username or contact phone number and could lead to a reflected cross-si...
PT-2025-38491
Name of the Vulnerable Software and Affected Versions Cognex In-Sight Explorer and In-Sight Camera Firmware affected versions not specified Description The software exposes a proprietary protocol on TCP port 1069 for management operations, including modifying system properties. The user managemen...
PT-2025-38490
Name of the Vulnerable Software and Affected Versions Cognex In-Sight Explorer and In-Sight Camera Firmware affected versions not specified Description The software exposes a proprietary protocol on TCP port 1069 for management operations, including modifying system properties. The user managemen...
EulerOS Virtualization 2.13.1 : libcap (EulerOS-SA-2025-2172)
According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The PAM module pamcap.so of libcap configuration supports group names starting with @, during actual parsing, configurations not...
CVE-2025-36759
Through the provision of user names, SolaX Cloud will suggest similar user accounts and thereby leak sensitive information such as user email addresses and phone numbers...
Plex users: Reset your password!
Media streaming platform Plex has warned customers about a data breach, advising them to reset their password. Plex said an attacker broke into one of its databases, allowing them to access a "limited subset" of customer data. This included email addresses, usernames, hashed passwords, and...
PT-2025-37031
Name of the Vulnerable Software and Affected Versions: SolaX Cloud versions prior to 27-06-2025 Description: SolaX Cloud leaks sensitive information, such as user email addresses and phone numbers, by suggesting similar user accounts when user names are provided. This information disclosure poses...
CVE-2025-52545
E3 Site Supervisor Control firmware version 2.31F01 RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services...
Linux Distros Unpatched Vulnerability : CVE-2019-3992
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can access the server's configuration fil...
CVE-2025-52545
E3 Site Supervisor Control firmware version 2.31F01 RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services...
CVE-2025-52545 Privilege escalation in the application services
E3 Site Supervisor Control firmware version 2.31F01 RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services...
