233042 matches found
epson-eh-tw5350-advisories
Epson EH-TW5350 — CVE-2021-43716, CVE-2021-43717, CVE-2021-43718 Three vulnerabilities discovered in the Epson EH-TW5350 projector firmware 150075647YWWV110 by team B-BEAM-BOB during the KITRI Best of the Best BoB program, 2021. CVE IDs were assigned by MITRE on 2021-12-21 but the records remaine...
EUVD-2026-104643
TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera...
Vuln-Next.js-CVE-2025-29927
npx [email protected] Install packages npm install -D @types/bcrypt npm install mysql2 npm install jose npm install -D @types/jsonwebtoken Prepare DB CREATE TABLE users id INT PRIMARY KEY AUTOINCREMENT, username VARCHAR255 UNIQUE NOT NULL, password VARCHAR255 NOT NULL ; Run npm run dev...
CVE-2024-32830-poc
CVE-2024-32830-poc PoC code to download files with CVE-2024-32830 getimagesize bypass To bypass the getimagesize restriction, we can create a simple image/vnd.wap.wbmp image for PHP. The check for the filetype is very simple: //...
MeterPwrShell
Inactive Tool - Reason : busy with something else . . . / \ / | \ \ / /| | | | | | \ \ / \ / / \ / \ \ | / / | \ \ | | / | | | | / / / Y \ /| | \ /| | / | \ / | | / | Y \ /| || |/ \ | /\ | \ | || // || / /|| /\ /| \ / / / / / / / MeterPwrShell2 Automated Tool That Generate A...
PT-2026-118254
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, fast-uri percent-decodes the scheme component with the legacy global unescape function before validating it, so an input whose decoded...
PT-2026-118311
The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page record. It neither checks the user's permissions nor limits which fields can be changed. Any authenticated backend user can therefore change any property of any page, including its...
PT-2026-118482
SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local bypass authentication mode where enforce authentication in api service/auth/middleware.py trusts the client-controlled request.remote addr value, which is derived from the spoofable X-Forwarded-For header due to...
Alibaba Cloud Linux 3 : 0311: tomcat (ALINUX3-SA-2026:0311)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0311 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-52316: Unchecked Error Condition...
RHEL 10 : openssh (RHSA-2026:85847)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85847 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files...
RHEL 9 : openssh (RHSA-2026:80513)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:80513 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46150)
In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotifygetmarksafe may return false for a mark on an unrelated group, which results in bypassing the permission check. Fix by skipping over detached marks that are not in the...
PT-2026-118295
Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding in github.com/corazawaf/coraza...
Ubuntu: USN-8927-1 (CVE-2026-92387): curl vulnerabilities
By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer timeout mechanism, indefinitely blocking all concurrent transfers bound to the same multi-handle...
PT-2026-118294
External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration in github.com/external-secrets/external-secrets...
PT-2026-118306
The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website...
PT-2026-118494
Name of the Vulnerable Software and Affected Versions import-export versions prior to 3.7.1 ApostropheCMS versions prior to 4.34.0 Description An editor with permissions to import an enabled content type, but lacking the required publication role, can bypass normal publish permissions and lifecyc...
KLA91363 SB vulnerability in Mozilla Firefox ESR
Security bypass vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories MFSA2026-113 Exploitation Related products Mozilla-Firefox-ESR CVE list CVE-2026-113470 high Solution Update to the latest version...
PT-2026-118373
Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.26 Apache Tomcat versions 10.1.0-M1 through 10.1.60 Apache Tomcat versions 9.0.0.M1 through 9.0.122 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.0 through 7.0.109...
Linux Distros Unpatched Vulnerability : CVE-2026-98590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix bpfsock context code generation Currently, the ctx access code reads the rxqueuemapping field with either a 4-byte or 2-byte load. The rest of the bits...