CVE-2023-32315

CVE-2023-32315 Tool for CVE-2023-32315 exploitation. Features: Scans single or bulk targets from txt files Utilizes multiprocessing for faster scanning Automatic login capability Installation: Make sure you're in this repo's directory and have python3 installed Install required packages using: pi...

CVE-2026-123543

OpenAM before 16.1.4 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending serialized Java data without size or structure limits. Attackers can send small crafted requests to remote SDK endpoints, classic login pages, or the...

CVE-2026-123543 OpenAM before 16.1.4 Unauthenticated DoS via Unbounded Java Deserialisation

OpenAM before 16.1.4 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending serialized Java data without size or structure limits. Attackers can send small crafted requests to remote SDK endpoints, classic login pages, or the...

CVE-2026-123543

OpenAM versions before 16.1.4 are vulnerable to an unauthenticated Denial of Service (DoS) attack due to unbounded Java deserialisation . The flaw allows attackers to exhaust server resources by sending serialized Java data that lacks sufficient size or structure limits. By sending small, crafted...

CVE-2026-123543 OpenAM before 16.1.4 Unauthenticated DoS via Unbounded Java Deserialisation

OpenAM before 16.1.4 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending serialized Java data without size or structure limits. Attackers can send small crafted requests to remote SDK endpoints, classic login pages, or the...

EUVD-2026-119428

OpenAM before 16.1.4 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending serialized Java data without size or structure limits. Attackers can send small crafted requests to remote SDK endpoints, classic login pages, or the...

PT-2026-139824

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.4 Description An issue allows unauthenticated attackers to cause a denial of service by sending serialized Java data without size or structure limits, leading to server resource exhaustion. Attackers can send...

CVE-2026-123543: OpenIdentityPlatform OpenAM: OpenAM before 16.1.4 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server…

OpenAM before 16.1.4 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending serialized Java data without size or structure limits. Attackers can send small crafted requests to remote SDK endpoints, classic login pages, or the...

WSO2 Enterprise Integrator cross-site scripting vulnerability

The WSO2 Enterprise Integrator contains a cross-site scripting vulnerability. This vulnerability arises because the search functionality in the administration console fails to properly encode user inputs before rendering them in the browser. As a result, it may lead to cross-site scripting attack...

CVE-2026-108925

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2...

CVE-2026-108925 Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2...

EUVD-2026-97121

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2...

CVE-2026-108925 Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2...

CVE-2026-108925

The Cohesity NetBackup Administration Console web interface is vulnerable to a Basic XSS (CWE-80) flaw due to the improper neutralization of script-related HTML tags. This vulnerability affects versions before 11.2 . An attacker could potentially execute malicious scripts in a user's browser, tho...

CVE-2026-108925: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2...

PT-2026-110341

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2...

CVE-2026-107583 Inefficient Algorithmic Complexity in hMailServer

Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. The route that renders ...

CVE-2026-4034

Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console...

CVE-2026-4034 TIBCO Administrator Injection Vulnerability

Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console...

CVE-2026-4034 TIBCO Administrator Injection Vulnerability

Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console...