182645 matches found
CVE-2026-68953
CVE-2026-68953 is a missing authentication for critical function vulnerability affecting the Digital Watchdog VMAX DVR and NVR product lineups. Unauthenticated attackers on an adjacent network can send crafted HTTP(S) requests to bypass authentication and disclose sensitive device information, in...
CVE-2026-68953 Missing Authentication for Critical Function in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTPS requests...
EUVD-2026-79944
The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTPS requests...
CVE-2026-83077
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM component: Siebel Cloud Manager. Supported versions that are affected are 22.3-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Cloud...
CVE-2026-76684
Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading ...
CVE-2026-76688
Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative...
CVE-2026-76673
Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete...
CVE-2026-69206
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, DigestAuth replay protection records lastNc plus one instead of the highest nonce-count value it has accepted. When a legitimate client sends noncontiguous nc values because of parallel or retried requests, the stored...
CVE-2026-18422
Concrete CMS before 9.5.3 did not enforce a destination-side authorization check and did not validate a CSRF token in the multilingual page assignment backend action Backend\Page\Multilingual::assign. As a result, an authenticated user who held the Edit Page Multilingual Settings permission on a...
EUVD-2026-79942
Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control-management actions, which relied solely on CSRF token validation. Because the token is bound to the user and action rather than to a specific block, page, or form, an...
CVE-2026-73317
CVE-2026-73317 XenForo anterior a 2.3.13 permite que un administrador con solo el permiso de reconstrucción de caché envíe un trabajo de aprobación como otro usuario. Qué sucede El endpoint de reconstrucción del ACP acepta una clase de trabajo y opciones proporcionadas por el llamante. Su...
traefik-stripprefix-auth-bypass-cve-2026-48020-path-normalization
CVE-2026-48020 — Bypass de autenticación a nivel de ruta en StripPrefix de Traefik PoC Un proof of concept autocontenido para CVE-2026-48020 , un bypass de autenticación/autorización a nivel de ruta en el middleware StripPrefix de Traefik causado por la normalización de rutas que ocurre después d...
thm-Moniker-Link-cve-2024-21413-writeup
TryHackMe: Moniker Link CVE-2024-21413 Ruta: Cyber Security 101 → Exploitation Basics → Moniker Link CVE-2024-21413 Dificultad: Sala premium Enfoque: Omisión de Vista Protegida de Outlook, fuga de hash NTLM y captura de credenciales con Responder CVE-2024-21413 es una vulnerabilidad crítica de...
DsArk64
DsArk64 DsArk64.sys se distribuye con 360 Total Security. Firmado por WHQL de Microsoft. LOLDrivers: magicsword-io/LOLDrivers308. CVE: Solicitado MITRE. Primitivas Terminación de procesos ring 0 IOCTL 0x80863008, entrada: PID en bruto de 4 bytes El driver llama a ZwOpenProcessALLACCESS +...
EAC-Kernel-Packet-Fucker
EAC-Kernel-Packet-Fucker No es mi código. Solo para guardarlo https://www.unknowncheats.me/forum/anti-cheat-bypass/503052-easy-anti-cheat-kernel-packet-fucker.html Este es el Easy Anti-Cheat Kernel Packet Fucker para abreviar, EACKPFucker. ¿Qué es esto? Básicamente, los paquetes a través de su...
EAC
العربية يوجدت نسختين من EAC: الأولى مدفوعة وتسمى EAC، والأخرى مجانية وتسمى EOC وهي الأكثر شيوعًا في معظم الألعاب. لقد قمت برفع SDK لمساعدتك في فهم كيفية عمل EAC. على كل حال، يعتبر EOC أضعف من النسخة المدفوعة بحكم أنه مجاني، ولكن هذا لا يمنع المطورين من شراء ميزات إضافية. ما أريد تسليط الضوء عليه...
palo-alto-cve-2026-0265-checker
Comprobador de riesgo CVE-2026-0265 para Palo Alto PAN-OS Un script de Python que se conecta a una lista de firewalls de Palo Alto Networks y dispositivos Panorama a través de SSH e informa de la exposición de cada dispositivo a CVE-2026-0265, una vulnerabilidad de omisión de autenticación en...
EUVD-2026-79504
Concrete CMS 9 before 9.5.3 authorized the dashboard sitemap reorder action Concrete\Controller\Backend\Dashboard\SitemapUpdate using only the global accesssitemap task permission and did not check per-page edit permission before updating each page's display order. As a result, an authenticated...
CVE-2026-18424 Concrete CMS 9.0.0 to 9.5.2 is vulnerable to SSRF protection bypass in remote file import when multiple URLs share a host but use different ports
Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a host's validated DNS pin. When multiple remote URLs share the same host, only the first ValidatedRemoteUrl is retained and reused for every later URL with that host. A...