13 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-13966
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromi...
CVE-2025-13966
creationtimestamp| type| source ---|---|--- 2025-12-12 08:20:41+00:00| seen| https://gist.github.com/Darkcrai86/3306d67aec45be93ab1e50f90a1f91c1...
CVE-2024-13966
ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords located under the Attendance Settings tab as "Self-Password"...
CVE-2024-13966
creationtimestamp| type| source ---|---|--- 2025-05-27 18:48:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17699...
CVE-2024-13966 ZKTeco BioTime default password
ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords located under the Attendance Settings tab as "Self-Password"...
CVE-2024-13966
CVE-2024-13966 affects ZKTeco BioTime, a web-based time and attendance system. The vulnerability allows unauthenticated attackers to enumerate usernames and log in as any user using the default password 123456, enabling potential administrative access if a user account remains with the default pa...
CVE-2024-13966 ZKTeco BioTime default password
ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged from the default value '123456'. Users should change their passwords located under the Attendance Settings tab as "Self-Password"...
CVE-2018-13966
CVE-2018-13966 is rejected/not used and does not represent an active vulnerability entry.
CVE-2019-13966
In iTop through 2.6.0, an XSS payload can be delivered in certain fields such as icon of the XML file used to build the dashboard. This is similar to CVE-2015-6544 which is only about the dashboard title...
CVE-2019-13966
CVE-2019-13966 affects iTop up to version 2.6.0, enabling cross-site scripting via XSS payloads in fields within the XML used to build the dashboard (e.g., icon). The related documents confirm that the vulnerability is XSS in the dashboard XML input, but do not provide a vendor patch or definitiv...