491 matches found
PT-2025-43155
Name of the Vulnerable Software and Affected Versions jurajpuchky Fix Multiple Redirects versions through 1.2.3 Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting XSS. This means that malicious...
DEBIAN-CVE-2025-61789
Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values...
UBUNTU-CVE-2025-61789
Icinga DB Web provides a graphical interface for Icinga monitoring. Before 1.1.4 and 1.2.3, an authorized user with access to Icinga DB Web, can use a custom variable in a filter that is either protected by icingadb/protect/variables or hidden by icingadb/denylist/variables, to guess values...
PT-2025-42499
Name of the Vulnerable Software and Affected Versions Icinga DB Web versions prior to 1.1.4 Icinga DB Web versions prior to 1.2.3 Description Icinga DB Web offers a graphical interface for Icinga monitoring. An authorized user with access to Icinga DB Web can utilize a custom variable within a...
Icinga DB Web 安全漏洞
Icinga DB Web is an Icinga open source graphical interface to the Icinga DB database. A security vulnerability exists in Icinga DB Web versions prior to 1.1.4 and prior to 1.2.3, which originates from an authorized user being able to guess the value of a protected or hidden variable via a custom...
CVE-2025-10293 Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...
CVE-2025-10293
The CVE-2025-10293 case concerns the WordPress Keyy Two Factor Authentication (like Clef) plugin. According to the provided sources, the vulnerability is a privilege-escalation flaw in versions up to 1.2.3 caused by improper validation of the user identity associated with a generated token. This ...
CVE-2025-10293 Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
The Keyy Two Factor Authentication like Clef plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible f...
EUVD-2008-3954
Malware in sbrugna...
EUVD-2010-4866
Malware in sbrugna...
EUVD-2021-24804
Malware in sbrugna...
EUVD-2015-9183
Malware in sbrugna...
EUVD-2011-3938
Malware in sbrugna...
EUVD-2018-17152
Malware in sbrugna...
EUVD-2025-8397
Malicious code in bioql PyPI...
EUVD-2023-50435
Malicious code in bioql PyPI...
EUVD-2025-24659
Malicious code in bioql PyPI...
EUVD-2025-27618
Malicious code in bioql PyPI...