114765 matches found
CVE-2026-76488
A vulnerability exists in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) due to insufficient access control to file system resources. An authenticated, remote attacker with valid administrative credentials can exploit this by submitting crafted valu...
Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty
Summary There are multiple vulnerabilities in Java, JavaScript and IBM WebSphere Application Server Liberty used by IBM Transformation Advisor. Vulnerability Details CVEID:CVE-2026-75899 DESCRIPTION: fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and...
Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty
Summary There are multiple vulnerabilities in Java, JavaScript and IBM WebSphere Application Server Liberty used by IBM Application Modernization Accelerator. Vulnerability Details CVEID:CVE-2026-14981 DESCRIPTION: IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty ar...
EUVD-2026-94524
A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This...
CVE-2026-20321
A vulnerability exists in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) . Due to insufficient input validation of user-controlled command arguments, an authenticated remote attacker with valid administrative credentials can send crafted input to the AP...
CVE-2026-20321 Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability
A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This...
Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller APIC engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internall...
Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability
A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have valid administrative credentials. This...
Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th...
CVE-2026-92393
Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn are defined as the following Kubernetes objects: "deployments", "replicasets", "statefulsets", "daemonsets", "jobs", "cronjobs". The CREATE...
CVE-2022-42889
CVE-2022-42889 تطبيق اختبار يحتوي هذا المستودع على تطبيق بسيط يستخدم Apache Commons Text 1.9، وهو عرضة للثغرة CVE-2022-42889. تشغيل التطبيق قم ببناء التطبيق وتشغيله عبر docker: docker build . -t vulnerable-app docker run vulnerable-app $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS...
CVE-2026-92393 Apache YuniKorn: Admission control bypass via workload UPDATE operation
Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn are defined as the following Kubernetes objects: "deployments", "replicasets", "statefulsets", "daemonsets", "jobs", "cronjobs". The CREATE...
CVE-2026-92393 Apache YuniKorn: Admission control bypass via workload UPDATE operation
Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn are defined as the following Kubernetes objects: "deployments", "replicasets", "statefulsets", "daemonsets", "jobs", "cronjobs". The CREATE...
CVE-2026-92393
Apache YuniKorn versions 1.9.0 and earlier are vulnerable to an admission control bypass because the software fails to implement label and user annotation checks during the workload UPDATE action. This affects several Kubernetes objects, including deployments , replicasets , statefulsets , daemon...
CVE-2026-107104 Unsafe Deserialization Vulnerability in Manacle Technologies ERP System
This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable functionality of the targeted system. Successf...
CVE-2020-0601
CVE-2020-0601 استغلال تنفيذ التعليمات البرمجية عن بُعد CVE-2020-0601 - Citrix Application Delivery Controller & Gateway...
Helpdesk-Telecom-CVE-2025-64459
التحضير لتحميل المستودع 1. نقوم بتحديث الحزم: sudo apt update 2. إذا لزم الأمر، قم بتثبيت git: sudo apt install -y git 3. يجب إعداد قواعد إعادة توجيه المنافذ. في إعدادات "الشبكة" لجهاز Debian 12.11.0، انقر على "إعادة توجيه المنافذ". 4. أضف قاعدة: الاسم: Django; البروتوكول: TCP; عنوان المضيف: فارغ...
DVWA-ZAP-PENTEST
Évaluation de la vulnérabilité DVWA à l'aide d'OWASP ZAP Une évaluation pratique de la sécurité d'une application web sur DVWA Damn Vulnerable Web App , réalisée avec OWASP ZAP Zed Attack Proxy 2.17.0. Ce projet documente l'ensemble du workflow : reconnaissance spidering, scan automatisé des...
Fortra FileCatalyst Workflow <= v5.1.6 - SQL Injection
A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this...
