CVE-2023-23752

CVE-2023-23752 - Recurrence of Joomla Unauthorized Access Vulnerability Script Usage Install python libraries pip install -r requirements.txt Vulnerability Verification python3 CVE-2022-26134check.py -u url -c whoami Batch Scan python3 CVE-2023-23752.py -f urlpart.txt Affected Versions 4.0.0 =...

CVE-2025-12523

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user...

CVE-2025-12523 Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user...

CVE-2025-12523

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user...

CVE-2025-12523

The Centreon Web monitoring system is vulnerable to Broken Object Level Authorization in the Users Configuration Endpoint (/centreon/api/latest/configuration/users). This security flaw allows an authenticated user to bypass access restrictions, potentially leading to the disclosure of sensitive i...

CVE-2025-12523 Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user...

EUVD-2025-211213

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user...

CVE-2025-12523 Broken Object Level Authorization in Users Configuration Endpoint (/centreon/api/latest/configuration/users) – Sensitive Information Disclosure

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user...

CVE-2025-12523: Centreon: Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user...

PT-2026-132379

Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user...

CVE-2026-110243

The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell command, unlike sibling handlers that perform the same validation. An authenticated...

ValueCell.ai: Server-side request forgeing vulnerability

ValueCell.ai’s versions prior to 0.1.20 have a server-side request forgeing vulnerability. This vulnerability stems from unauthenticated server-side requests. Attackers can exploit this vulnerability by setting an unvalidated baseurl through the provider configuration endpoint. This allows them t...

Linux Distros Unpatched Vulnerability : CVE-2026-78356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application...

CVE-2026-74047

Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth...

CVE-2026-74047 Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint

Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth...

EUVD-2026-98680

Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth...

CVE-2026-74047 Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint

Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth...

CVE-2026-74047 Wazuh 4.0.0 before 4.14.8 authd.pass Disclosure via Agent 000 Config Endpoint

Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth...

CVE-2026-74047

Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth...

CVE-2026-74047

Wazuh versions 4.0.0 before 4.14.8 are susceptible to an information disclosure vulnerability. Low-privileged users with agent:read permissions (specifically the default readonly role) can access the unmasked agent configuration endpoint. By requesting the auth component configuration for pseudo-...