Lucene search
+L

173104 matches found

Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.14 views

PT-2026-82780

Name of the Vulnerable Software and Affected Versions Ebyte NE2-D11 version FW-9167-0-11 Ebyte NA111-M affected versions not specified Description The web management interface fails to consistently enforce authentication before granting access to administrative functionality. This allows an...

9.8CVSS6AI score0.0053EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.12 views

PT-2026-82797

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive administrative actions when default credentials remain configured. An unauthenticated attacker on the adjacent network could reboot the device or restore factory settings,...

8.1CVSS5.3AI score0.00229EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.12 views

PT-2026-82793

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...

9.8CVSS5.6AI score0.00674EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.17 views

PT-2026-82569

Name of the Vulnerable Software and Affected Versions ToolUniverse versions prior to 1.3.0 Description The software executes caller-supplied Python code within a sandbox that can be escaped. The executor in python executor tool.py uses a denied list for attribute names and calls but fails to bloc...

10CVSS5.7AI score0.00574EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.14 views

PT-2026-82792

The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout mechanisms. This could allow an attacker to perform automated authentication attacks against deployments that rely on password based authentication...

8.7CVSS5.3AI score0.00357EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.16 views

PT-2026-82794

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality...

8.7CVSS5.3AI score0.00364EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.16 views

PT-2026-83117

Name of the Vulnerable Software and Affected Versions PaperCut MF affected versions not specified PaperCut NG affected versions not specified Description An improper access control issue exists in the web management interface. Under specific conditions, unauthenticated remote requests targeting...

9.8CVSS6.2AI score0.01617EPSS
SaveExploits3References101
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.14 views

PT-2026-83118

Name of the Vulnerable Software and Affected Versions PaperCut MF affected versions not specified PaperCut NG affected versions not specified Description An unsafe dynamic class loading issue exists in the database connection utilities. The application instantiates database driver classes based o...

9.4CVSS6.3AI score0.01691EPSS
SaveExploits3References95
Tenable Nessus
Tenable Nessus
added 2026/08/27 12:00 a.m.10 views

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2026:3798-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3798-1 advisory. - CVE-2026-5545: wrong reuse of HTTP Negotiate connection bsc1262632. - CVE-2026-5773: wrong reuse of SMB...

9.1CVSS6.7AI score0.00719EPSS
SaveExploits7References22
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.11 views

PT-2026-82791

An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway products. Authentication tokens used by the web management interface are insufficiently protected during client-side session handling, which may allow an attacker with access to exposed session informati...

9.8CVSS5.4AI score0.00434EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/27 12:00 a.m.10 views

RHEL 9 : iscsi-initiator-utils (RHSA-2026:60428)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:60428 advisory. The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface iSCSI protocol, as well as th...

8.5CVSS5.7AI score0.00385EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/08/27 12:00 a.m.9 views

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2026:3792-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3792-1 advisory. This update for rmt-server fixes the following issue: Update to version 3.1 bsc1274715. - CVE-2026-42256: net-imap: hostile server can perfo...

6.5CVSS6AI score0.00299EPSS
SaveExploits0References5
VulnCheck KEV
VulnCheck KEV
added 2026/08/27 12:00 a.m.37 views

VulnCheck KEV: CVE-2026-76581

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to inconsistent and ambiguous HMAC message construction between the unauthenticated wdpssostep1 and wdpssostep2 AJAX actions, where step 1 signs and disclose...

9.8CVSS5.8AI score0.00339EPSS
SaveIn wildExploits2References3
CISA KEV Catalog
CISA KEV Catalog
added 2026/08/27 12:00 a.m.47 views

ownCloud Improper Authentication Vulnerability

ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured...

9.8CVSS8.8AI score0.43205EPSS
SaveIn wildExploits1
Tenable Nessus
Tenable Nessus
added 2026/08/27 12:00 a.m.10 views

RockyLinux 8 : kernel-rt (RLSA-2026:59737)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59737 advisory. kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64 decode...

9.8CVSS4.8AI score0.00971EPSS
SaveExploits0References17
RedHat Linux
RedHat Linux
added 2026/08/26 11:42 p.m.8 views

Important: Red Hat Security Advisory: iscsi-initiator-utils security update

An update for iscsi-initiator-utils is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

8.5CVSS5.6AI score0.00385EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/26 11:42 p.m.7 views

open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI Internet Small...

8.5CVSS5.4AI score0.00093EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/26 10:16 p.m.5 views

CVE-2026-81202

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

7.5CVSS0.00401EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/26 10:16 p.m.6 views

CVE-2026-75329

The Netty configuration distribution service port 8283 of super-diamond-server = 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configuration of any project including database passwords, API keys, etc. by sending a TCP request without any credential...

9.8CVSS0.00326EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/26 10:16 p.m.12 views

CVE-2026-65641

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

9.3CVSS0.00544EPSS
SaveExploits0References1
Rows per page
Query Builder