CVE-2026-28775

An unauthenticated Remote Code Execution RCE vulnerability exists in the SNMP service of International Datacasting Corporation IDC SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the private SNMP community string with read/write access by default. Because the SNMP age...

CVE-2026-28775

creationtimestamp| type| source ---|---|--- 2026-03-04 07:55:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg7smsqkfc2u 2026-03-04 20:01:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116172684996762067...

CVE-2023-28775

Missing Authorization vulnerability in Yoast Yoast SEO Premium.This issue affects Yoast SEO Premium: from n/a through 20.4...

CVE-2023-28775 WordPress Yoast SEO Premium plugin <= 20.4 - Unauthenticated Zapier API Key Reset vulnerability

Missing Authorization vulnerability in Yoast Yoast SEO Premium.This issue affects Yoast SEO Premium: from n/a through 20.4...

CVE-2023-28775

CVE-2023-28775 affects Yoast SEO Premium (WordPress plugin) up to version 20.4. The issue is Missing Authorization / Broken Access Control allowing unauthenticated actions (Zapier API key reset). Patch 20.5 fixes it. Recommend upgrading to Yoast SEO Premium 20.5 or later and validating API key co...

Security Bulletin: IBM WebSphere Automation is vulnerable to cross-site scripting (CVE-2024-28775)

Summary IBM WebSphere Automation is vulnerable to cross-site scripting. Vulnerability Details CVEID:CVE-2024-28775 DESCRIPTION: IBM WebSphere Automation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intend...

WordPress Yoast SEO Premium Plugin <= 20.4 is vulnerable to Broken Access Control

Software Yoast SEO Premium Type Plugin Vulnerable versions = 20.4 Fixed in 20.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-28775 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5c54141d1cb7 Credits Rafie Muhammad Patchstack...

CVE-2022-28775

creationtimestamp| type| source ---|---|--- 2022-04-12 00:22:17+00:00| seen| https://t.me/cibsecurity/40523 2022-05-12 07:49:15+00:00| published-proof-of-concept| https://t.me/androidMalware/1527...

CVE-2022-28775

Samsung Flow contains an improper access control vulnerability affecting versions prior to 4.8.06.5. The issue allows an attacker to write files without the application’s permission. The PT-2022-19224 entry confirms the affected versions and provides a remediation: update to version 4.8.06.5 or l...