CVE-2026-51648

TOTOLINK T6 routers running firmware 4.1.5cu.748_B20211015 are affected by an incorrect access control flaw in the getWanInfo function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain WAN information from the device. The CVSS 3.1 score is 7.5 (HIGH) ,...

Linux Distros Unpatched Vulnerability : CVE-2026-80649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Fix OOB in scmipowernameget scmipowernameget does not validate the domain number passed by the external caller, which may lead to an...

EUVD-2026-67908

Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain setup wizard and onboarding configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51661

TOTOLINK T6 router (version 4.1.5cu.748_B20211015 ) is affected by an incorrect access control flaw in the getPortForwardRules function. An unauthenticated attacker can obtain port-forwarding rules by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The CNA-assigned CVSS v3.1 score is 9.1 ...

Linux Distros Unpatched Vulnerability : CVE-2026-19538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BLOCKED access control list items that are evaluated to deny access on the the proxy protocol port can be bypassed completely when connecting over TCP or TL...

CVE-2026-51611

Incorrect access control in the startSlaveReboot function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to arbitrarily force a reboot via sending a crafted MQTT message...

CVE-2020-0796-LPE-POC

CVE-2020-0796 POC di Elevazione dei Privilegi Locali c 2020 ZecOps, Inc. - https://www.zecops.com - Trova gli errori degli attaccanti POC per verificare CVE-2020-0796 / "SMBGhost" Risultato atteso: cmd.exe avviato con accesso di sistema Destinato solo a scopi educativi e di test in ambienti...

CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Autor: Byte Reaper Beschreibung CVE-2025-10046 ist eine SQL-Injection-Schwachstelle im ELEX WooCommerce Google Shopping Product Feed Plugin für WordPress, Version 1.4.3 und früher. Das Problem befindet sich in der Datei...

CVE-2026-61802 Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/config

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the cleartext cluster key from a configuration endpoint that fails to redact it. The REST API provides a...

CVE-2026-78495 Dimension Server-Side Request Forgery via Remote Backup Connection Test

A server-side request forgery SSRF vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

CVE-2026-78613

WatchGuard Dimension is affected by an authenticated SQL injection vulnerability in the log viewer feature . An authenticated user holding report administration permissions can send specially crafted requests to gain arbitrary command execution as the Dimension WebUI process user. The CVSS 4.0 ba...

CVE-2026-78498 Dimension Server-Side Request Forgery via Email Server Test Settings

A server-side request forgery SSRF vulnerability WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

CVE-2026-78500

WatchGuard Dimension contains a blind server-side request forgery (SSRF) vulnerability in the Database Server Test configuration. An authenticated privileged attacker can use this to enumerate exposed network services on adjacent network systems . The CVSS 4.0 base score is 5.1 (MEDIUM) , with an...

CVE-2026-78618 Dimension Business Logic Flaw Allows Chained Backend Object Operations

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request...

CVE-2026-78500 Dimension Blind SSRF via Database Test Connection Feature

A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

rhuss__jolokia_CVE-2018-1000129_1-4-0

Jolokia è un modo innovativo per accedere remotamente agli MBean JMX. È diverso dai connettori JSR-160 in quanto si basa su un approccio basato su agenti che usa JSON su HTTP per la comunicazione in stile REST. Sono disponibili diversi agenti per ambienti differenti: WAR Agent per la distribuzion...

keycloak__keycloak_CVE-2022-4361_21-1-1

Keycloak Keycloak è una soluzione Open Source di Identity and Access Management per applicazioni e servizi moderni. Questo repository contiene il codice sorgente per il server Keycloak, gli adapter Java e l'adapter JavaScript. Aiuto e Documentazione Documentazione Lista di posta utenti - Lista di...

keycloak__keycloak_CVE-2022-4137_20-0-3

Keycloak Keycloak è una soluzione Open Source per la gestione dell'identità e degli accessi per applicazioni e servizi moderni. Questo repository contiene il codice sorgente per il Keycloak Server, gli adattatori Java e l'adattatore JavaScript. Aiuto e Documentazione Documentazione Mailing list...

Security Bulletin: Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-3482)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed Access Control security vulnerability. Vulnerability Details CVEID:CVE-2026-3482 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0...

wireless-ids

Wireless IDS Sistema di rilevamento intrusioni Wireless IDS è uno strumento open source scritto in Python e funziona in ambiente Linux. Questo strumento analizza il traffico aereo circostante per attività sospette come pacchetti di attacco WEP/WPA/WPS. Fa quanto segue: Rileva deautenticazioni di...