172592 matches found
The vulnerability of system calls unlinkat and funlinkat in the kernels of FreeBSD allows a attacker to compromise the integrity of the protected information.
The vulnerability of the unlinkat and funlinkat system calls in FreeBSD operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...
PT-2026-69953
Name of the Vulnerable Software and Affected Versions TrustyAI Service affected versions not specified Description A flaw in the TrustyAI Service TAS deployment allows any pod on the cluster network to bypass authentication and directly access the TAS backend API. This could enable an attacker to...
CVE-2026-16742
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
PT-2026-69989
Name of the Vulnerable Software and Affected Versions PingFederate versions prior to 13.1 Description Cross-Site Request Forgery CSRF weaknesses in the Administrative Console may allow actors to perform unauthorized actions. This occurs when administrators with active sessions are triggered to...
The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client allows a hacker to trigger a service failure.
The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-68300
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: auth: verify auth requirement when authchunk is NULL sctpauthchunkverify returns true unconditionally when chunk-authchunk is NULL, silently skipping...
Linux Distros Unpatched Vulnerability : CVE-2026-68376
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix authhmacs array size in struct sctpcookie The authhmacs array in struct sctpcookie is supposed to store a complete SCTPAUTHHMACALGO parameter, which...
UBUNTU-CVE-2026-16742
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
RHEL 9 : nodejs:22 (RHSA-2026:52399)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:52399 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...
PT-2026-69986
Name of the Vulnerable Software and Affected Versions AnythingLLM versions 1.0.0 through 1.15.0 Description The unauthenticated account-recovery flow in the server/utils/PasswordRecovery/index.js file uses the recoverAccount function to deduplicate recoveryCodes values before they are trimmed. Th...
PT-2026-69961
Name of the Vulnerable Software and Affected Versions Feast affected versions not specified feast-operator affected versions not specified Description Feast and feast-operator use a default configuration of "no auth", which means no security manager is installed. This allows unauthenticated and...
The vulnerability of the WebExtensions component in the Firefox web browser and the Thunderbird email client allows a hacker to compromise data integrity.
The vulnerability of the WebExtensions component in the Firefox web browser and the Thunderbird email client involves bypassing authentication processes through spearfishing. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...
The vulnerability of the TrueConf Server software lies in the lack of authentication for critical functions, allowing attackers to execute arbitrary scripts and increase their privileges.
The vulnerability of the TrueConf Server software is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary scripts and increase their privileges...
Linux Distros Unpatched Vulnerability : CVE-2026-68130
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: defer destroyprevioussession until after NTLM authentication In ntlmauthenticate, destroyprevioussession is called using a user pointer resolved from the...
Photon OS 5.0: Bluez PHSA-2024-5.0-91-0207
An update of the bluez package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0207. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Exploit for CVE-2026-64638
🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit Behav...
Exploit for CVE-2026-64638
CVE-2026-64638 — XSS2Shell Proof of Concept A proof-of-concep...
EUVD-2026-54911
A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...
CVE-2026-19342 code-projects Task Management System Login index.php improper authentication
A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...
CVE-2026-19342
CVE-2026-19342 affects code-projects Task Management System 1.0, specifically the Login component’s /index.php. The vulnerability arises from manipulating the Password argument, causing improper authentication. The issue is exploitable remotely, and public exploit details are reported. No remedia...