CVE-2026-16104 Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

CVE-2019-16104

Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATHINFO...

CVE-2020-16104

SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit Enterprise Data Interfaces' privilege to execute arbitrary SQL against a third party database if EDI is configured to import data from this database. This issue affects:...

CVE-2020-16104

creationtimestamp| type| source ---|---|--- 2020-12-14 22:39:15+00:00| seen| https://t.me/cibsecurity/20759...

CVE-2020-16104

SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit Enterprise Data Interfaces' privilege to execute arbitrary SQL against a third party database if EDI is configured to import data from this database. This issue affects:...

CVE-2020-16104

CVE-2020-16104 describes an SQL injection vulnerability in the Enterprise Data Interface (EDI) of Gallagher Command Centre. Remote attackers with the privilege to edit EDI entries can execute arbitrary SQL against a third‑party database if EDI is configured to import data from that database. Affe...

CVE-2019-16104

Silver Peak EdgeConnect SD-WAN is affected by CVE-2019-16104. A reflected cross-site scripting (XSS) vulnerability exists in versions prior to 8.1.7.x, exploitable via the rest/json/configdb/download/ PATH_INFO exposed by the device. The issue is confirmed across multiple sources (CNVD, Red Hat/R...

CVE-2018-16104

CVE-2018-16104 is rejected/not used per the initial description.

CVE-2018-16104

...

CVE-2017-16104

CVE-2017-16104 affects citypredict.whauwiller with a directory traversal vulnerability. The flaw allows an attacker to access the filesystem by crafting URLs that include relative paths (e.g. ../../../../etc/passwd). Public advisories (GHSA and npm advisory) describe affected versions, provide an...

sussex.ac.uk XSS vulnerability

Vulnerable URL: https://www.sussex.ac.uk/video/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description| Value ---|--- Patched:| Yes, at 31.10.2017 Latest...