13 matches found
CVE-2026-52793
Froxlor is open source server administration software. Prior to 2.3.7, the API authentication path in lib/Froxlor/Api/FroxlorRPC.php and FroxlorRPC::validateAuth accepts an API key and secret for an administrator or customer account without checking type2fa, validating a TOTP code, or invoking...
CVE-2026-52793 Froxlor: API Authentication bypasses 2FA Authentication
Froxlor is open source server administration software. Prior to 2.3.7, the API authentication path in lib/Froxlor/Api/FroxlorRPC.php and FroxlorRPC::validateAuth accepts an API key and secret for an administrator or customer account without checking type2fa, validating a TOTP code, or invoking...
CVE-2026-52793 Froxlor: API Authentication bypasses 2FA Authentication
Froxlor is open source server administration software. Prior to 2.3.7, the API authentication path in lib/Froxlor/Api/FroxlorRPC.php and FroxlorRPC::validateAuth accepts an API key and secret for an administrator or customer account without checking type2fa, validating a TOTP code, or invoking...
CVE-2026-52793
Froxlor (open source server administration software) versions prior to 2.3.7 have a flaw in FroxlorRPC::validateAuth() (lib/Froxlor/Api/FroxlorRPC.php): it validates only API key/secret without checking type_2fa or invoking FloxlorTwoFactorAuth, so a 2FA-enabled account's API key grants full acce...
CVE-2026-52793
creationtimestamp| type| source ---|---|--- 2026-05-29 06:32:36+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-f9rx-7wf7-jr36...
EUVD-2025-52793
Malicious code in peculiar-amber-mink npm...
CVE-2025-52793
creationtimestamp| type| source ---|---|--- 2025-06-20 16:17:19+00:00| seen| Telegram/vPkHdTlHK4ikWxmUX8woH5Q86R3jDi2hkiCmD7tIHBczmU 2025-06-23 16:47:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19229...
CVE-2025-52793
Cross-Site Request Forgery CSRF vulnerability in Esselink.nu Esselink.nu Settings esselinknu-settings allows Reflected XSS.This issue affects Esselink.nu Settings: from n/a through = 4.5...
CVE-2025-52793
Cross-Site Request Forgery CSRF vulnerability in Esselink.nu Esselink.nu Settings esselinknu-settings allows Reflected XSS.This issue affects Esselink.nu Settings: from n/a through = 4.5...
CVE-2024-52793 XSS vulnerability in serveDir API of @std/http/file-server on POSIX systems
The Deno Standard Library provides APIs for Deno and the Web. Prior to version 1.0.11, http/file-server's serveDir with showDirListing: true option is vulnerable to cross-site scripting when the attacker is a user who can control file names in the source directory on systems with POSIX file names...
