CVE-2026-85951

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud credentials or...

CVE-2026-85952

Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud...

CVE-2026-109362 Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens

Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal. Attackers can mint a token with a TTL up to 10 years, which the owner cannot list or...

CVE-2026-109321

The grav-plugin-login-oauth plugin (versions before 1.4.3 ) contains a predictable local credentials vulnerability. The flaw stems from the plugin provisioning OAuth accounts as standard Grav users using a deterministic username format (. ) and an unsalted MD5 hash of the provider identifier as t...

CVE-2026-109293 Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint

Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of...

EUVD-2026-97595

Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of...

CVE-2026-109293 Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint

Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source code shared with them read-only. Attackers can request GET /api/v1/tools/export to retrieve the full Python source of...

CVE-2026-109293

Open WebUI versions 0.11.0 through 0.11.3 are vulnerable to an information disclosure flaw via the Tool Export Endpoint . Authenticated non-admin users with tool export permissions can use a GET request to /api/v1/tools/export to retrieve the full Python source code of read-only shared tools. Thi...

CVE-2021-3130

CVE-2021-3130 Suggested description Within the Open-AudIT up to 4.0.2 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the...

cve-2018-9995

cve-2018-9995 DVR, full name Digital Video Recorder hard disk video recorder, is a digital video recorder. Compared with traditional analog video recorders, it uses hard disk recording, hence often called hard disk video recorder, also known as DVR. This vulnerability allows an attacker to access...

CVE-2026-85952 Server-side request forgery in Progress MarkLogic Server Linux cloud deployments

Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud...

EUVD-2026-97514

Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud...

CVE-2026-85952

Progress MarkLogic Server Linux cloud deployments are vulnerable to a server-side request forgery (SSRF) (CWE-918) in versions 12.x before 12.1.0 and 11.x before 11.3.7 . An authenticated attacker could exploit this flaw to access internal cloud services, which may lead to unauthorized access to ...

EUVD-2026-97513

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud credentials or...

CVE-2026-85951 Server-side request forgery in Progress MarkLogic Server Azure deployments

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud credentials or...

CVE-2026-85951

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 deployed on Azure are vulnerable to a server-side request forgery (SSRF) (CWE-918). This vulnerability allows an authenticated attacker to access internal cloud services, which could lead to the unauthorized acquisition ...

CVE-2024-33113

CVE-2024-33113 The D-LINK DIR-845L router is vulnerable to information disclosure via the bscsmsinbox.php file. CVE-2024-33113 is a vulnerability in the D-LINK DIR-845L router that allows information disclosure through the bscsmsinbox.php file. The vulnerability stems from inadequate handling of...

CVE-2026-18963

CVE-2026-18963 Keycloak Unauthenticated Account Takeover ★ CVE-2026-18963 Keycloak Reset-Credentials Flow Bypass PoC ★ https://github.com/user-attachments/assets/ebed1e64-a40c-4333-be18-9acbadd655b0 Overview CVE-2026-18963 is a critical unauthenticated account takeover vulnerability in the Keyclo...

Triple_Fetch-Kernel-Creds

Triple-Fetch-Kernel-Creds Attempt to steal kernelcredentials from launchd + taskt pointer Based on: CVE-2017-7047 About Triple Fetch by Ian Beer from Google Project Zero Triple Fetch is an exploit for iOS devices prior to iOS 10.3.3 It exploits a logic error in libxpc that allows attackers to sen...

CVE-2024-56428

CVE-2024-56428 Cleartext credentials in local database of the iLabClient Read out the configuration incl. password The iLabClient is used to download the results from the laboratory server. The configuration data are stored locally in the Apache Derby instance iLabClient. The password is stored i...