CVE-2026-107444

A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrieve repository metadata associated with...

py3webfuzz

Py3webFuzz ';-- Python Biblioteca de módulo de fuzzing web Python3 Module Compatible Autor Jonathan Angeles @ex0day Github: https://github.com/jangelesg/py3webfuzz Contribuyentes Nathan Hamiel @nathanhamiel DESCRIPCIÓN Basado en pywebfuzz, Py3webfuzz es un módulo de Python3 que ayuda a identifica...

EUVD-2026-94685

An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied certificate identifiers are handled without adequate sanitization prior to execution i...

CVE-2026-87688

An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. The flaw occurs because user-supplied certificate identifiers are processed without adequate sanitization before being executed in external system rout...

CVE-2026-92861

The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application...

CVE-2026-87669

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...

CVE-2026-87670

An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers. An authenticated user with any valid REST session can spoof these headers ...

CVE-2026-94580

A path traversal vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 10.0.1 , specifically within the component handling USB storage operations . An authenticated user with USB management privileges can manipulate requested target paths to bypass intende...

EUVD-2026-94683

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

CVE-2026-94580

An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...

GraphQLer

The only dependency-aware GraphQL API testing tool! GraphQLer is a cutting-edge tool designed to dynamically test GraphQL APIs with a focus on adaptability. It offers a range of sophisticated features that streamline the testing process and ensure robust analysis of GraphQL APIs. GraphQLer...

EUVD-2026-94675

The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application...

CVE-2026-92861

The Android application Ticket Ryutsu Center contains hard-coded credentials . This security flaw may allow an attacker to obtain an API key used by the application. No specific exploit information or remediation steps are provided in the documents.

CVE-2026-92861

The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application...

EUVD-2026-94674

An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers. An authenticated user with any valid REST session can spoof these headers ...

CVE-2026-87670

An authorization logic vulnerability exists in the Brocade Fabric OS REST API gateway (versions before 10.0.1 ). The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers , allowing an authenticated user with a valid REST session to spoof thes...

CVE-2026-87670

An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers. An authenticated user with any valid REST session can spoof these headers ...

CVE-2026-87669

Brocade Fabric OS versions before 10.0.1 are susceptible to a missing authorization check in the REST API interface. This vulnerability allows an authenticated user, regardless of their role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite (MAPS) violation data a...

EUVD-2026-94673

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...

CVE-2026-87669

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...