CVE-2025-27480-The-Silent-Gateway-Risk

CVE-2025-27480-The-Silent-Gateway-Risk Letting attackers run malicious code without needing a cracked password, user interaction, or even a foothold in your network. That’s CVE-2025-27480 It’s late you are running on red-bull we have all been there. You’re troubleshooting a production issue and...

MINI-27GW-GV38-F9QG

Bulletin has no description...

RHSA-2026:55440 Red Hat Security Advisory: glib2 security update

Bulletin has no description...

MINI-CWXQ-HJ6X-23C8

Bulletin has no description...

OPENSUSE-SU-2026:11514-1 containerized-data-importer1.66-api-1.66.0-1.1 on GA media

These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

MINI-82R3-GRF4-XGQ8

Bulletin has no description...

CVE-2026-1234

creationtimestamp| type| source ---|---|--- 2026-03-31 08:56:53+00:00| seen| https://gist.github.com/ANIRUDH-SJ/0018340475a61d52fcf717138330d261 2026-04-22 10:30:14+00:00| seen| https://bsky.app/profile/cvedatabase.bsky.social/post/3mk3c42ruox2o 2026-05-25 10:26:41+00:00| seen|...

@dargmuesli/nuxt-vio (>=20.6.0, <=21.0.0-beta.11), @darraghor/nest-backend-libs (>=5.0.10, <=5.0.11) +52 more potentially affected by CVE-2026-82854 via nodemailer (>=8.0.0, <=8.0.3)

nodemailer NPM version =8.0.0, =20.6.0, =5.0.10, =0.0.1-beta.0, =0.2.0-alpha.1, =6.0.0-beta.9, =11.14.0, =5.8.38, =2.9.4-beta.9766, =0.1.10, =1.11.4, =2.1.8, =0.0.0-experimental.09a2220201377abea1f719e6f8d201b10ae3f7af, =2.0.0, =3.2.11, =20260208.152.42, =20260327.0.55 and more Source cves:...

MAL-2026-1753 Malicious code in internal-secret-project-1234 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dc95d958f766e3d4594c0ea651f834cd877966e5c76347c4f0d819eb5e79d7 The package internal-secret-project-1234 was found to contain malicious code...

CVE-2020-1234

creationtimestamp| type| source ---|---|--- 2026-02-15 01:21:11+00:00| seen| https://gist.github.com/judas-priest/71b873a9a3196b8fedbfdd1748e71d04 2026-02-15 01:52:29+00:00| seen| https://gist.github.com/judas-priest/af851a5f3bafe8de1a03115a8cabfcd0...

CVE-2020-37135

AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system...

PT-2026-6818

Name of the Vulnerable Software and Affected Versions AMSS++ version 4.7 Description AMSS++ 4.7 has a flaw that permits unauthorized access to administrative accounts. This is due to the use of hardcoded credentials, specifically the default username 'admin' and password '1234'. Successful...

CVE-2021-47707

COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel...

EUVD-2021-34732

COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel...

PT-2025-50237

Name of the Vulnerable Software and Affected Versions COMMAX CVD-Axx DVR version 5.1.4 Description The COMMAX CVD-Axx DVR contains weak default administrative credentials, enabling remote password attacks and disclosure of RTSP streams. An attacker can exploit this by sending a POST request to an...

PT-2025-46317

CVE-2025-12542 - CVE-2022-1234: Apache HTTP Server Unauthenticated Remote Code Execution CVE ID : CVE-2025-12542 Published : Nov. 10, 2025, 11:15 p.m. | 1 hour, 30 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 |...

Exploit for CVE-2023-1234

This repository is an offensive tool for Linux server clusters. It is a PoC exploit for CVE-2023-1234, which is not specified in the provided context. The target product/service or framework is not explicitly stated, but it appears to be a Linux server cluster management tool. The vulnerability...

Exploit for Use After Free in Microsoft

CVE-2025-27480-The-Silent-Gateway-Risk Letting attackers run m...

CVE-2024-1234

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data attribute in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor acce...

CVE-2012-1234

SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to execute arbitrary SQL commands via a malformed URL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0234...