Open Automation Software OAS Platform V16.00.0121 - Missing Authentication

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this...

GeoServer WPS - Server Side Request Forgery

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The OGC Web Processing Service WPS specification is designed to process information from any server using GET and POST requests. This presents the opportunity for Server Side Request...

XWiki < 4.10.20 - Remote code execution

XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a close...

rConfig 3.9.4 - SQL Injection

rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because nodes' passwords are stored by default in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. id: CVE-2020-10547 info: nam...

Roxy Fileman 1.4.5 - Unrestricted File Upload

Roxy Fileman 1.4.5 is susceptible to unrestricted file upload via upload.php. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id: CVE-2018-20526 info: name: Roxy Fileman 1.4.5 -...

Vendure - Arbitrary File Read

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

cPanel < 11.109.9999.116 - Cross-Site Scripting

An issue was discovered in cPanel before 11.109.9999.116. Cross Site Scripting can occur on the cpsrvd error page via an invalid webcall ID. id: CVE-2023-29489 info: name: cPanel 11.109.9999.116 - Cross-Site Scripting author: DhiyaneshDk,0xKayala severity: medium description: | An issue was...

MetInfo 7.0.0 beta - SQL Injection

MetInfo 7.0.0 beta is susceptible to SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter a different issue than CVE-2019-16997. id: CVE-2019-17418 info: name: MetInfo 7.0.0 beta - SQL Injection author: ritikchaddha severity: high description: | MetInfo...

SolarView Compact 6.00 - Local File Inclusion

SolarView Compact 6.00 is vulnerable to local file inclusion which could allow attackers to access sensitive files. id: CVE-2022-29298 info: name: SolarView Compact 6.00 - Local File Inclusion author: ritikchaddha severity: high description: SolarView Compact 6.00 is vulnerable to local file...

Rails File Content Disclosure

Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system's file system to be exposed. id: CVE-2019-5418 info: name: Rails File Content Disclosure...

Jira - Incorrect Authorization

Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 is susceptible to an incorrect authorization check in the /rest/api/2/user/picker rest resource, enabling an attacker to enumerate usernames and gain improper access. id: CVE-2019-3403...

Vulnerability-Disclosure-Policy

취약점 공개 정책 우리는 취약점 공개가 양방향 소통이라고 믿습니다. 연구자뿐만 아니라 공급업체도 조정된 취약점 공개에 참여해야 합니다. Enable Security는 자체 연구를 통해 취약점을 발견하면 해당 취약점을 공급업체에 통지하며, 첫 접촉 후 90일이 지난 뒤 또는 공급업체가 수정 사항을 더 일찍 출시하는 경우에는 그 이전에 상세 정보를 방어 커뮤니티에 공개합니다. Enable Security는 공급업체와 기밀 통신을 구축하기 위해 합리적인 노력을 기울일 것입니다. 공급업체의 보안 팀 또는 지정된 연락처와 연락이 닿으면...

Sherlock

Устарело. Взгляните на Watson вместо этого. Sherlock Скрипт PowerShell для быстрого поиска отсутствующих исправлений программного обеспечения для уязвимостей локального повышения привилегий. В настоящее время ищет: MS10-015 : User Mode to Ring KiTrap0D MS10-092 : Task Scheduler MS13-053 :...

CVE-2017-13872-Patch

CVE-2017-13872-Патч Загрузите это программное обеспечение и выполните его, после чего оно запросит новый пароль для пользователя root. Пароль может быть другим, но, я думаю, по умолчанию он равен паролю администратора. Обновление Вы можете исправить ошибку, обновив вашу операционную систему...

python-patrol

Python Patrol macOS 上で Python のインストールをスキャンし、CVE-2015-20107.py スクリプトを実行してパッチ適用が必要かどうかを報告します これらのスクリプトのいくつかはフルディスクアクセス権限が必要で、ルートとして実行する必要があります。これにより macOS ファイルシステム全体（macOS によって制限されている領域を除く）をスキャンできます。 フルディスクアクセス権限を持つアプリからこれを実行してください。つまり、Apple のシステム設定 セキュリティとプライバシー プライバシーとセキュリティで iTerm.app...

Windows-Exploit-Suggester

ОПИСАНИЕ Этот инструмент сравнивает уровень исправлений целевой системы с базой данных уязвимостей Microsoft, чтобы выявить потенциально отсутствующие обновления. Он также уведомляет пользователя о наличии публичных эксплойтов и модулей Metasploit для отсутствующих бюллетеней. Для работы требуетс...

ROOT-APP-MAVEN-CVE-2024-40094 CVE-2024-40094 in com.graphql-java:graphql-java - Patched by Root

Root has patched CVE-2024-40094 in the com.graphql-java:graphql-java package for Root:Maven. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-89161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur. CVE-2026-89161...

Fedora 43 : libevent (2026-728dd9f704)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-728dd9f704 advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...

PT-2026-89868

A flaw resulting in XML external entity XXE was found in Akana API Platform in which references were improperly restricted during XML-to-JSON processing. The issue affects Akana versions 2026.1, 2025.1.1, and all versions before 2024.1.6 including older unsupported versions of Akana and has been...