CVE-2026-108925: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2...

CVE-2026-107783

AWS Tools for PowerShell versions prior to 5.0.306 are vulnerable to the insertion of sensitive information into log files. This flaw (associated with CWE-532 ) may allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remed...

CVE-2026-107783 Insertion of sensitive information into log file in AWS Tools for PowerShell

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...

EUVD-2026-95896

Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console password from command output and log artifacts. To remediate this issue, users should upgrade to version 5.0.306 or later...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-kyverno-plugin-fips, metrics-server-fips, redis-operator, kyverno-policy-reporter-plugins-trivy, neuvector-scanner-fips, knative-serving, certificate-transparency-fips, crossplane-provider-aws-identitystore-fips, tempo-fips, git-sync-fips,...

CVE-2026-100730

A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated...

CVE-2026-100730 Grid Protection Alliance openPDC and openHistorian Deserialization of Untrusted Data

A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated...

EUVD-2026-95779

A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated...

CVE-2026-100730

The Grid Protection Alliance openPDC and openHistorian software products contain a vulnerability in their service console interface. The flaw allows for the deserialization of untrusted data from a client-supplied data structure. On systems without Windows Authentication, an unauthenticated netwo...

wordpress-exploit-framework

WordPress Exploit Framework Un framework en Ruby diseñado para ayudar en las pruebas de penetración de sistemas WordPress. Instalación Para instalar la última versión estable, ejecuta gem install wpxf. Después de la instalación, puedes iniciar la consola de WordPress Exploit Framework ejecutando...

PT-2026-108904

Name of the Vulnerable Software and Affected Versions openPDC affected versions not specified openHistorian affected versions not specified Description A service console interface deserializes a client-supplied data structure. This allows an attacker to trigger the deserialization of an arbitrary...

CVE-2026-100730: Deserialization of Untrusted Data

A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated...

Exploit for Argument Injection in H2Database H2

H2 Database Console JDBC URL RCE CVE-2022-23221 Vulhubht...

Exploit for CVE-2020-14882

Oracle WebLogic Console Pre-Auth RCE CVE-2020-14882, CVE-2020...

389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor

A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...

CVE-2026-107583 Inefficient Algorithmic Complexity in hMailServer

Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. The route that renders ...

Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.2 release.

Red Hat Web Terminal Operator 1.11.2 has been released. The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed...

CVE-2026-102258

Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...

CVE-2026-102257

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

CVE-2026-102258

A post-authentication Stored Cross-Site Scripting (XSS) vulnerability exists in the SonicWall SMA1000 appliance's Management Console (AMC) . Under specific conditions, a remote authenticated attacker with administrator privileges can store and execute arbitrary JavaScript code within the AMC. Thi...