Lucene search
+L

7 matches found

NVD
NVD
•added 2026/08/28 12:18 a.m.•24 views

CVE-2026-71187

The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass authentication to obtain administrative access to the device...

9.8CVSS0.00781EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/27 12:00 a.m.•33 views

PT-2026-82778

Name of the Vulnerable Software and Affected Versions Ebyte device affected versions not specified Description The device relies on client-side authentication logic that can be reproduced by unauthenticated users. This allows an attacker to generate valid authentication requests and bypass securi...

9.8CVSS5.7AI score0.00781EPSS
SaveExploits0References4
Mend
Mend
•added 2026/05/11 6:06 p.m.•4 views

CVE-2026-43968

Improper Neutralization of CRLF Sequences 'CRLF Injection' vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values. cowsse:event/1 in cowlib guards the id and event fields against \n but not against bare \r, and the internal prefixlines/2 function...

6.3CVSS6.1AI score0.00266EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2026/04/29 8:13 a.m.•66 views

CVE-2026-42513 Authentication Bypass Vulnerability in e-Sushrut HMIS

This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status. A remote attacker could exploit this vulnerability by intercepting and modifying the server response. Successful exploitation of this...

8.8CVSS0.00482EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/29 12:00 a.m.•26 views

PT-2026-35881

Name of the Vulnerable Software and Affected Versions e-Sushrut affected versions not specified Description Improper authentication logic relies on client-side response parameters to determine authentication status. A remote attacker can intercept and modify the server response to bypass...

8.8CVSS5.4AI score0.00482EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/01/30 9:59 p.m.•26 views

EUVD-2026-5001

LocalSend is a free, open-source app that allows users to share files and messages with nearby devices over their local network without needing an internet connection. In versions up to and including 1.17.0, when a user initiates a "Share via Link" session, the LocalSend application starts a loca...

6.1CVSS5.6AI score0.00316EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•32 views

PT-2026-5495

Name of the Vulnerable Software and Affected Versions LocalSend versions up to and including 1.17.0 Description LocalSend is an application enabling file and message sharing with nearby devices on a local network, without internet access. When a user initiates a "Share via Link" session, the...

6.1CVSS5.6AI score0.00316EPSS
SaveExploits1References8
Rows per page
Query Builder