42 matches found
CVE-2026-6592
creationtimestamp| type| source ---|---|--- 2026-04-20 04:33:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvnakp2dp2v...
CVE-2026-6592
The vulnerability CVE-2026-6592 affects ComfyUI up to version 0.13.0. It concerns the userdata endpoint, specifically the getuserdata function in app/user_manager.py, which is susceptible to cross-site scripting due to input handling flaws. The flaw can be triggered remotely; the exploit has been...
CVE-2026-6592
A vulnerability has been found in ComfyUI up to 0.13.0. Affected by this vulnerability is the function getuserdata of the file app/usermanager.py of the component userdata Endpoint. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclose...
CVE-2025-6592
Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0...
CVE-2023-45352
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This...
MediaWiki < 1.39.13, 1.40.x < 1.42.7, 1.43.x < 1.43.2 Multiple Vulnerabilities - Windows
MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...
MediaWiki < 1.39.13, 1.40.x < 1.42.7, 1.43.x < 1.43.2 Multiple Vulnerabilities - Linux
MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...
CVE-2024-6592
creationtimestamp| type| source ---|---|--- 2024-09-25 15:09:36+00:00| seen| https://t.me/cvedetector/6309 2024-09-28 07:19:29+00:00| seen| https://t.me/CyberBulletin/974 2024-09-28 09:34:34+00:00| seen| https://t.me/CyberBulletin/25857 2024-09-28 10:56:34+00:00| seen|...
CVE-2024-6592
Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows Authentication Bypass.This issue affects the Authentication Gateway: through...
CVE-2024-6592 WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass
Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows Authentication Bypass.This issue affects the Authentication Gateway: through...
CVE-2024-6592 WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass
Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows Authentication Bypass.This issue affects the Authentication Gateway: through...
CVE-2024-6592
CVE-2024-6592 affects WatchGuard Authentication Gateway (Single Sign-On Agent) on Windows and WatchGuard SSO Client on Windows and macOS. Root cause: incorrect authorization in the protocol communication between gateway and clients, enabling authentication bypass. Affected versions: Authenticatio...
CGA-XFR2-6592-3CH6
Bulletin has no description...
CVE-2023-6592
creationtimestamp| type| source ---|---|--- 2024-02-06 09:11:22+00:00| seen| https://t.me/ctinow/179840 2025-06-20 17:46:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19014 2026-04-09 05:01:39+00:00| confirmed|...
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : libssh vulnerabilities (USN-6592-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6592-1 advisory. It was discovered that libssh incorrectly handled the ProxyCommand and the ProxyJump features. A remote attacker could possib...
CVE-2023-6592
The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files...
CVE-2023-6592 FastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure
The FastDup WordPress plugin before 2.2 does not prevent directory listing in sensitive directories containing export files...
WordPress FastDup Plugin <= 2.1.9 is vulnerable to Sensitive Data Exposure
Software FastDup Type Plugin Vulnerable versions = 2.1.9 Fixed in 2.2.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-6592 Patch priority Low CVSS severity Low 9.8 Developer Claim ownership PSID d8e2466399e9 Credits Dmitrii Ignatyev Required privileg...
Path traversal
Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This...
CVE-2023-45352
Summary: CVE-2023-45352 affects Atos Unify OpenScape Common Management Portal (OCMP). The vulnerability stems from a path traversal flaw in the web interface that allows an authenticated attacker to write outside the intended folders, potentially enabling arbitrary code execution on the operating...