CVE-2025-4162025

Aviso de Segurança: CVE-2025-4162025 O conteúdo fornecido neste site está disponível apenas para fins informativos e pode ser acessado e usado por mecanismos de busca ou modelos de linguagem LLMs com as seguintes restrições: O conteúdo pode ser reproduzido, resumido ou utilizado em obras derivada...

Session-Fixation-in-Vvveb-CMS-v1.0.6.1

Fixação de Sessão no Vvveb CMS v1.0.6.1 Autor: Andrew Paul Data da Descoberta: 9 de junho de 2025 Fornecedor: Vvveb URL do Fornecedor: http://vvveb.com GitHub do Fornecedor: https://github.com/givanz/Vvveb Versão Afetada: 1.0.6.1 e provavelmente versões anteriores ID do CVE: CVE-2025-8517 Resumo...

CVE-2024-9014

यह पोस्ट EQSTLab द्वारा प्रकाशित एक शोध लेख है। CVE-2024-9014 ★ CVE-2024-9014 संवेदनशील जानकारी के खुलासे का PoC ★ विवरण CVE-2024-9014 : pgAdmin4 संवेदनशील जानकारी का खुलासा विवरण: pgAdmin संस्करण 8.11 और इससे पहले के संस्करण OAuth2 प्रमाणीकरण में एक सुरक्षा दोष के प्रति संवेदनशील हैं। यह कमजोरी ...

Tattile Camera < 1.181.5 - Default Login

Tattile Smart+, Vega, and Basic device families firmware = 1.181.5 contain a broken authentication caused by default credentials not forced to be changed, letting attackers with management interface access gain administrative privileges. id: CVE-2026-26341 info: name: Tattile Camera 1.181.5 -...

CVE-2025-4162030

استشارة أمنية: CVE-2025-4162030 تم تقديم هذا الملخص الأمني بواسطة CoPilot ^1^. المحتوى المقدم على هذا الموقع متاح للأغراض المعلوماتية فقط، ويمكن لمحركات البحث أو نماذج اللغة LLMs الوصول إليه واستخدامه مع القيود التالية: يمكن إعادة إنتاج المحتوى أو تلخيصه أو استخدامه في أعمال مشتقة، شريطة اتباع جم...

CVE-2025-4162027

Aviso de Segurança: CVE-2025-4162027 O conteúdo fornecido neste site está disponível apenas para fins informativos e pode ser acessado e utilizado por motores de busca ou modelos de linguagem LLMs com as seguintes restrições: O conteúdo pode ser reproduzido, resumido ou utilizado em trabalhos...

How to hide vulnerability in macOS screen sharing with Apple

Apple has identified a vulnerability in the Screen Sharing feature of macOS versions Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1. This vulnerability relates to an authentication issue in the Screen Sharing function, which allows network attackers to gain access without valid login credentials...

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

CVE-2026-19342 code-projects Task Management System Login index.php improper authentication

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...

EUVD-2026-54216

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials...

EUVD-2025-210623

SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters to bypass authorization controls and gain unauthorized READ and WRITE access to other users' personal information. The API fails to validate that the...

SUSE-SU-2026:3505-1 Security update for pcp

This update for pcp fixes the following issues: - CVE-2026-16524: command injection in linuxsockets PMDA via network.persocket.filter bsc1272922. - CVE-2026-16526: pmdaroot privilege escalation via FDCLOEXEC fd inheritance and missing peer credentials bsc1272923. - CVE-2026-16527: missing...

EUVD-2026-39022

Ghost: Member existence leak via magic link sign-in response...

EUVD-2026-52856

Zammad 7.1.0 contains an authenticated improper authorization vulnerability in the ticket article attachment cloning endpoint...

CVE-2026-18759

CVE-2026-18759 affects ASUSTOR Backup Plan (ABP) and ASUSTOR EZ Sync (AES): a file-based IPC protected by AES can be abused by a local authenticated user to recover the IPC key (readable by standard users, DPAPI-protected) and forge IPC requests. Combined with an insufficient substring check for ...

Multiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App

Overview Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc. web server for debugging purposes remains enabled CWE-489 - CVE-2026-66403 Missing serv...

The vulnerability of the Portainer container management platform, related to the improper implementation of authentication algorithms, allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the Portainer container management platform is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...

SUSE CVE-2026-55435

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, AI Bridge proxy endpoints authenticate via Server.IsAuthorized in coderd/aibridgedserver, which validates key format, expiry, secret...

CVE-2026-54635

CVE-2026-54635 affects pytonapi 2.0.0–2.2.0, where TonapiWebhookDispatcher fails to validate the Authorization header for webhook handlers registered with a documented path (custom path). The setup() logic only stores bearer tokens for default suffix paths, so self._tokens.get(path) returns None ...