Lucene search
K

43 matches found

Circl
Circl
added 2026/05/27 1:48 a.m.7 views

CVE-2026-8606

creationtimestamp| type| source ---|---|--- 2026-05-27 01:48:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsfb74agt2i...

7CVSS5.8AI score0.00058EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/10/13 11:40 a.m.4 views

WordPress GSheetConnector For Gravity Forms plugin <= 1.3.23 - Cross-Site Request Forgery to Arbitrary Plugin Activation/Deactivation vulnerability

Cross-Site Request Forgery to Arbitrary Plugin Activation/Deactivation vulnerability discovered by wesley wcraft in WordPress Plugin Gravity Forms Google Sheet Connector versions = 1.3.23...

2.4CVSS6.9AI score0.00016EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-8606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bypass of two factor authentication in RestAPI in Checkmk 2.3.0p16 and 2.2.0p34 allows authenticated users to bypass two factor authentication CVE-2024-8606 Not...

9.2CVSS5.6AI score0.00098EPSS
Exploits0References2
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-8606 Malicious code in @malware-test-dozer-limas-chout-rouge/test-mlw3-dozer-limas-chout-rouge (npm)

The package @malware-test-dozer-limas-chout-rouge/test-mlw3-dozer-limas-chout-rouge was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 8:54 a.m.5 views

CVE-2019-8606

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Mojave 10.14.5. A local user may be able to load unsigned kernel extensions...

7CVSS5.5AI score0.00031EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2016-8606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The REPL server --listen in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack. CVE-2016-8606 Note that Nessus reli...

9.8CVSS8.5AI score0.0034EPSS
Exploits0References3
Circl
Circl
added 2024/09/23 9:37 a.m.0 views

CVE-2024-8606

creationtimestamp| type| source ---|---|--- 2024-09-23 09:37:35+00:00| seen| https://t.me/cvedetector/6176...

9.2CVSS4.8AI score0.00098EPSS
Exploits0References1
OSV
OSV
added 2024/09/23 7:15 a.m.10 views

CVE-2024-8606

Bypass of two factor authentication in RestAPI in Checkmk 2.3.0p16 and 2.2.0p34 allows authenticated users to bypass two factor authentication...

8.8CVSS6.8AI score
Exploits0References1
Cvelist
Cvelist
added 2024/09/23 7:1 a.m.25 views

CVE-2024-8606 Fix 2FA bypass via RestAPI

Bypass of two factor authentication in RestAPI in Checkmk 2.3.0p16 and 2.2.0p34 allows authenticated users to bypass two factor authentication...

9.2CVSS0.00098EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/23 7:1 a.m.11 views

CVE-2024-8606 Fix 2FA bypass via RestAPI

Bypass of two factor authentication in RestAPI in Checkmk 2.3.0p16 and 2.2.0p34 allows authenticated users to bypass two factor authentication...

9.2CVSS6.9AI score0.00098EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.16 views

RHEL 7 : guile (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - guile: REPL server vulnerable to HTTP inter-protocol attacks CVE-2016-8606 - The mkdir procedure of GNU...

9.8CVSS6.1AI score0.0034EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2023/02/21 6:10 p.m.29 views

K31130692: GNU Guile vulnerabilities CVE-2016-8605 and CVE-2016-8606

Security Advisory Description CVE-2016-8605 The mkdir procedure of GNU Guile temporarily changed the process umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode...

9.8CVSS6.4AI score0.0034EPSS
Exploits0
0day.today
0day.today
added 2020/07/14 12:0 a.m.213 views

Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 Remote Code Execution Exploit

Exploit for multiple platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Trend Micro Web Security Virtual Appliance Remote Code Execution', 'Description' = %q...

6.5CVSS0.896EPSS
Exploits10
Circl
Circl
added 2020/06/22 11:3 a.m.5 views

CVE-2020-8606

creationtimestamp| type| source ---|---|--- 2020-06-22 11:03:34+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/trendmicrowebsecurityexec.rb 2024-10-29 19:01:25+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1313...

9.8CVSS8.6AI score0.896EPSS
Exploits8References2
CVE
CVE
added 2020/05/27 10:45 p.m.144 views

CVE-2020-8606

CVE-2020-8606 affects Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5. The Nessus plugin describes an authentication bypass in the HTTP proxy service that can be exploited remotely, enabling access to internal services. A separate but related issue in the same advisory references...

9.8CVSS9.5AI score0.896EPSS
Exploits8References4Affected Software1
CVE
CVE
added 2019/12/18 5:33 p.m.78 views

CVE-2019-8606

CVE-2019-8606 is an IOKit-related vulnerability in macOS Mojave prior to 10.14.5, where a validation issue in handling symlinks could allow a local user to load unsigned kernel extensions. Apple’s security content notes this was addressed with improved symlink validation, with the fix present in ...

7CVSS5.8AI score0.00031EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/05/16 12:0 a.m.31 views

macOS 10.x < 10.14.5 Multiple Vulnerabilities (APPLE-SA-2019-05-09)

Binary data 700667.prm...

9.8CVSS7.7AI score0.27687EPSS
Exploits12References45
OSV
OSV
added 2018/11/14 1:29 a.m.1 views

CVE-2018-8606

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 on-premises version 8 Cross Site Scripting Vulnerability." This affects Microsoft...

5.4CVSS5.3AI score0.01103EPSS
Exploits0References2
Prion
Prion
added 2018/11/14 1:29 a.m.23 views

Cross site scripting

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 on-premises version 8 Cross Site Scripting Vulnerability." This affects Microsoft...

3.5CVSS5.2AI score0.01103EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2018/11/14 1:29 a.m.1 views

CVE-2018-8606

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 on-premises version 8 Cross Site Scripting Vulnerability." This affects Microsoft...

5.4CVSS4.8AI score0.01103EPSS
Exploits0References3
Rows per page
Query Builder