87119 matches found
CVE-2026-107819
The MariaDB Connector/C library, specifically the libmariadb component, is vulnerable in versions 3.4.1 through 3.4.10 . The Zero-Configuration SSL authentication-switch logic fails to reject TLS hostname verification mismatches before selecting a non-hashing authentication plugin. This flaw allo...
EUVD-2026-95920
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...
CVE-2026-107819 MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...
CVE-2026-107819 MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but did not reject a TLS hostname...
Komfy-Switch-Wifi-Password-Disclosure
Komfy-Switch-Wifi-Password-Disclosure Intro This writeup will detail my finding on D-Link's Komfy Switch with Camera to retrieve the device's associated wifi ssid and password over bluetooth 4.0 BLE. The Komfy switch is a home security and automation product that can replace a wall switch in your...
CVE-2026-107783
Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...
CVE-2026-107783 Insertion of sensitive information into log file in AWS Tools for PowerShell
Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...
CVE-2026-107783 Insertion of sensitive information into log file in AWS Tools for PowerShell
Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...
CVE-2026-107783
AWS Tools for PowerShell versions prior to 5.0.306 are vulnerable to the insertion of sensitive information into log files. This flaw (associated with CWE-532 ) may allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remed...
EUVD-2026-95896
Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...
CVE-2026-107783 Insertion of sensitive information into log file in AWS Tools for PowerShell
Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...
CVE-2026-108108
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...
CVE-2026-107804
Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not preserve the external client identity used by Gin because the backend has no trusted proxy configuration. Management requests can be attributed to loopback and pass the IP allowli...
CVE-2026-107808
The Nginx UI web user interface (versions 2.0.0 to 2.5.0 ) is vulnerable to an authentication bypass due to improper 2FA enforcement. Specifically, the POST /api/login endpoint fails to require a WebAuthn assertion when EnabledPasskey is true and no TOTP secret is configured, even if EnabledOTP i...
TwoMillion-Machine-Writeup
About Machine TwoMillion is an Easy difficulty Linux box that was released to celebrate reaching 2 million users on HackTheBox. The box features an old version of the HackTheBox platform that includes the old hackable invite code. After hacking the invite code an account can be created on the...
abdal-lockbox
🔐 Abdal LockBox 🌐 Read in your language: 🇬🇧 English | 🇨🇳 中文 | 🇷🇺 Русский | 🇪🇸 Español | 🇯🇵 日本語 | 🇮🇷 فارسی | 🇸🇦 العربية | 🇹🇷 Türkçe | 🇩🇪 Deutsch | 🇮🇳 हिन्दी Secure. Store. Autofill. — A privacy-first Android password manager by Abdal Security Group. Abdal LockBox keeps your credentials encrypted on...
CVE-2026-108108 PHPNuxBill through 2025.3.20 CHAP Authentication Bypass via Password::chap_verify()
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...
EUVD-2026-95809
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...
CVE-2026-108108
PHPNuxBill versions up to 2025.3.20 are vulnerable to an authentication bypass in RADIUS CHAP verification. The root cause is located in the Password::chap_verify() function, which incorrectly returns true even when the supplied response does not match the expected value. This allows an attacker ...
XSS2Shell-CVE-2026-64638
CVE-2026-64638 — XSS2Shell WordPress Pre-Auth Reflected XSS → Remote Code Execution Chain DOM Clobbering + Application Password Theft + REST API Plugin Activation = Full RCE ⚡ Overview CVE-2026-64638 is a critical pre-authentication Reflected XSS in WordPress wp-login.php. The vulnerability exist...