PT-2025-48042

Primakon Pi Portal 1.0.18 /api/v2/users endpoint is vulnerable to unauthorized data exposure due to deficient access control mechanisms. Any authenticated user, regardless of their privilege level including standard or low-privileged users, can make a GET request to this endpoint and retrieve a...

PT-2025-47767

Missing Authorization vulnerability in Sabuj Kundu CBX Bookmark & Favorite cbxwpbookmark allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CBX Bookmark & Favorite: from n/a through = 2.0.1...

Inside an Automotive Giant’s Data Leak — A Cloud Misconfiguration Lesson for AWS Users

70 TB+ of data, hard-coded keys, and weak IAM controls. For even the most experienced enterprises, one configuration decision can be enough to surface how interdependent and vulnerable modern cloud systems truly are. The recent data exposure incident at a large automotive firm highlights this...

EUVD-2025-36150

The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections...

PT-2025-43924

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access, increasing the risk of unauthorised connections...

CVE-2025-10611

CVE-2025-10611 describes an insufficient access-control implementation across multiple WSO2 Products, allowing bypass of authentication and authorization checks on certain REST APIs. This could let an unauthenticated actor invoke APIs and perform unauthenticated/unauthorized administrative operat...

Fortinet FortiADC 信息泄露漏洞

FortiADC is an application delivery controller from Fortinet designed to optimize application performance, provide load balancing and enhance security. FortiADC suffers from a security vulnerability that stems from the program's failure to provide adequate access control for sensitive data access...

EUVD-2006-3478

Malware in sbrugna...

EUVD-2006-2820

Malware in sbrugna...

EUVD-2014-4604

Malware in sbrugna...

EUVD-2006-7043

Malware in sbrugna...

EUVD-2007-5258

Malware in sbrugna...

EUVD-2015-7861

Malware in sbrugna...

EUVD-2015-7864

Malware in sbrugna...

EUVD-2015-7500

Malware in sbrugna...

EUVD-2007-6603

Malware in sbrugna...

EUVD-2006-3774

Malware in sbrugna...

EUVD-2015-7859

Malware in sbrugna...

Sensitive Information Disclosure

Liferay Portal is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper access control due to weak validation in the calendar feature, which allows authenticated users to enumerate other users’ calendars and use this information for phishing attacks...

PT-2025-35755

Name of the Vulnerable Software and Affected Versions: yydevelopment Mobile Contact Line versions through 2.4.0 Description: A missing authorization issue exists in yydevelopment Mobile Contact Line due to incorrectly configured access control security levels. Recommendations: Update yydevelopmen...