Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

Impact An input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. Vulnerable versions This vulnerability is present in Ghost from v6.14.0 up to v6.27.0. Patches v6.27.0 contains a fix for this issue. How to update For...

CVE-2026-107205

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite...

CVE-2026-106580

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue ...

CVE-2026-76498

The Cisco Application Policy Infrastructure Controller (APIC) is affected by multiple improper access control vulnerabilities, categorized under CWE-284 . These issues were identified during an internal security review by the engineering team and are addressed in the October 2026 hardening releas...

EUVD-2026-94472

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller APIC engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internall...

CVE-2026-76498 Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller APIC engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internall...

EUVD-2026-57803

Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass...

EUVD-2026-94469

A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th...

CVE-2026-76488 Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability

A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th...

EUVD-2026-93570

Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions...

casbin

Apache Casbin Новость : всё ещё беспокоитесь о том, как написать правильную политику Apache Casbin? Онлайн-редактор Apache Casbin уже здесь, чтобы помочь! Попробуйте его по адресу: https://casbin.apache.org/editor/ Apache Casbin — это мощная и эффективная библиотека управления доступом с открытым...

CVE-2026-76455

The Cisco NX-OS Software is affected by multiple vulnerabilities categorized as Improper Access Control (CWE-284). These issues were identified during an internal security review and are addressed in the October 2026 Software Security Hardening Release . The vulnerabilities are assigned a CRITICA...

EUVD-2026-94460

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76455 Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

S3Scanner

S3Scanner A quick and dirty script to find unsecured S3 buckets and dump their contents 💧 Using The tool has 2 parts: 1 - s3finder.py This script takes a list of domain names and checks if they're hosted on Amazon S3. Found S3 domains are output to file with their corresponding region in format...

CVE-2026-62252 Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login

Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an admin account with the password sipcapture stored as a legacy SHA-256 hex hash. There is no first-login...

CVE-2026-62252

Homer , an open-source telecom observability software, contains a hardcoded default admin password vulnerability in versions prior to 11.0.283 . The bootstrap process automatically creates an admin account with the password sipcapture (stored as a legacy SHA-256 hex hash) when using internal auth...

teleport

Teleport обеспечивает подключение, аутентификацию, контроль доступа и аудит для инфраструктуры. Вы можете использовать Teleport для: Настройки единого входа SSO для всей вашей облачной и локальной инфраструктуры. Защиты доступа к серверам, кластерам Kubernetes, базам данных, рабочим столам Window...

EUVD-2026-94448

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to gain unauthorized access to an affected application. This vulnerability is due to improper checks during th...

CVE-2026-20328 Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to gain unauthorized access to an affected application. This vulnerability is due to improper checks during th...