Okta Access Gateway authorization issue vulnerability

Versions of Okta Access Gateway prior to 2026.10.2 contain an authorization issue vulnerability. This vulnerability arises from the failure to validate the selected authentication source during login. Authenticated users with active sessions can modify the authentication source parameters,...

Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI Detection

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to 1 CFIDE/administrator/settings/mappings.cfm, 2 logging/settings.cfm, 3 datasources/index.cfm, 4...

CVE-2019-7197

A stored cross-site scripting XSS vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version...

Zimbra Collaboration Suite Administrator Console DoS

The vulnerability of the administrator console of the Zimbra Collaboration Suite email management system involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted GET request...

EUVD-2020-19356

Malware in sbrugna...

EUVD-2019-9491

Malware in sbrugna...

EUVD-2011-0600

Malware in sbrugna...

EUVD-2016-6695

Malware in sbrugna...

EUVD-2015-8041

Malware in sbrugna...

EUVD-2020-11323

Malware in sbrugna...

EUVD-2025-17692

Malicious code in bioql PyPI...

CVE-2025-46612

The Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to execute arbitrary commands via a wizard/workspace.jsp unrestricted file upload. To exploit this, the attacker must login to the administrator console default credentials are weak and easily guessable...

PT-2025-24659

Name of the Vulnerable Software and Affected Versions Airleader Master and Easy versions prior to 6.36 Description The issue allows remote attackers to execute arbitrary commands via an unrestricted file upload in the Panel Designer dashboard. This can be exploited by logging into the administrat...

CVE-2025-46612

The Panel Designer dashboard in Airleader Master and Easy before 6.36 allows remote attackers to execute arbitrary commands via a wizard/workspace.jsp unrestricted file upload. To exploit this, the attacker must login to the administrator console default credentials are weak and easily guessable...

CVE-2020-19419

Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from the administrator console without authentication...

CVE-2025-27704

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator...

CVE-2019-3638

Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway MWG 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive information or execute commands with the MWG administrator's credentials via tricking the administrator to click on a carefully...

CVE-2020-26820

SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console, to expose unauthenticated access to the file system and upload a malicious file. The attacker or another user can then use a separate...

Update Rollup 1 for System Center 2022 Virtual Machine Manager

Update Rollup 1 for System Center 2022 Virtual Machine Manager Applies To System Center 2022 Virtual Machine Manager Applies to Microsoft System Center 2022 Virtual Machine Manager Introduction This article describes the issues that are fixed in System Center Virtual Machine Manager 2022 UR1...

Update Rollup 9 for System Center 2016 Virtual Machine Manager

Update Rollup 9 for System Center 2016 Virtual Machine Manager Applies To System Center 2016 Virtual Machine Manager Introduction This article describes the issues that are fixed in System Center Virtual Machine Manager 2016 UR9 release. There are two updates that are available for Virtual Machin...