CVE-2026-78500 Dimension Blind SSRF via Database Test Connection Feature

A blind server-side request forgery SSRF vulnerability WatchGuard Dimension Database Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

Security Bulletin: Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-3482)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed Access Control security vulnerability. Vulnerability Details CVEID:CVE-2026-3482 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0...

wireless-ids

Wireless IDS Sistema di rilevamento intrusioni Wireless IDS è uno strumento open source scritto in Python e funziona in ambiente Linux. Questo strumento analizza il traffico aereo circostante per attività sospette come pacchetti di attacco WEP/WPA/WPS. Fa quanto segue: Rileva deautenticazioni di...

CVE-2026-44629

Genetec Streamvault all-in-one appliances (SV-100E and SV-300E series) and Synergis Softwire installed on Windows servers are affected by an improper access control vulnerability in the Synergis Softwire installation folder. A local attacker with low privileges can exploit this to achieve high co...

CVE-2026-44629

Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances SV-100E and SV-300E series and Synergis Softwire installed on Windows servers...

CVE-2026-78239

Xiiaozet LK100W is a Wi-Fi access point affected by a missing authentication vulnerability in a critical management function. A remote, unauthenticated attacker over the network can invoke this function to enable administrative services that should be restricted, potentially gaining unauthorized ...

CVE-2026-76945 Ebyte NE2-D11 Use of Client-Side Authentication

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality...

CVE-2026-76945

CVE-2026-76945 affects the Ebyte NE2-D11 device. The root cause is client-managed authentication tokens without sufficient server-side validation , allowing an attacker to replay or manipulate tokens to gain unauthorized access to administrative functionality . The primary impact is confidentiali...

CVE-2026-75813

The Ebyte NE2-D11 device is affected by a missing authorization flaw in certain configuration endpoints. The root cause is a lack of proper server-side authorization checks , which allows unauthenticated, remote attackers to access or modify sensitive device settings. The impact is rated HIGH (CV...

CVE-2026-75813 Ebyte NE2-D11 Missing Authorization

Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings. This could result in full compromise of device functionality...

CVE-2026-71187

Ebyte NE2-D11 contains a vulnerability in its client-side authentication logic that unauthenticated users can reproduce, allowing an attacker to generate valid authentication requests and bypass authentication entirely to obtain administrative access to the device. The flaw is assessed CRITICAL (...

CVE-2026-71187 Ebyte NA111-M Use of Client-Side Authentication

The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass authentication to obtain administrative access to the device...

CVE-2026-71187 Ebyte NA111-M Use of Client-Side Authentication

The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass authentication to obtain administrative access to the device...

CVE-2026-73809

A cleartext transmission vulnerability in Ebyte gateway products (including the NE2-D11) affects the web management interface , which does not adequately enforce transport-layer encryption . An attacker with network access could intercept authentication or session data, leading to disclosure of s...

CVE-2026-73809 Ebyte NA111-M Cleartext Transmission of Sensitive Information

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web management interface does not adequately protect sensitive communications using transport-layer encryption. An attacker with access to network traffic could intercept authentication o...

CVE-2026-73125

Ebyte NE2-D11 devices are affected by a missing authentication flaw in the web management interface . The interface does not consistently enforce authentication before granting access to administrative functionality, allowing an unauthenticated remote attacker to read sensitive configuration data...

CVE-2026-73125 Ebyte NA111-M Missing Authentication for Critical Function

Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability...

CVE-2026-73125 Ebyte NA111-M Missing Authentication for Critical Function

Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability...

raccoon

Raccoon: revisore dell'accesso agli oggetti Salesforce Rilasciato come open source da NCC Group Plc - https://www.nccgroup.com/ Sviluppato da Jerome Smith @exploresecurity con ringraziamenti a Viktor Gazdag @wucpi https://www.github.com/nccgroup/raccoon Rilasciato sotto AGPL - fare riferimento a...

CVE-2026-24061

🔒 CVE-2026-24061 - Sfrutta il Difetto Critico di Autenticazione 🚀 Per Iniziare Benvenuto nel progetto CVE-2026-24061. Questa applicazione dimostra un difetto di sicurezza critico. Consente agli attaccanti di aggirare l'autenticazione in GNU inetutils-telnetd. Questa README ti guiderà attraverso i...