CVE-2025-46171

vBulletin 3.x.x - DoS mediante sobrecarga de la lista de amigos Resumen El endpoint /misc.php?do=buddylist ejecuta una única consulta JOIN grande que recupera todos los amigos junto con su información de usuario y sesión para verificar el estado en línea. Debido a que esta consulta procesa toda l...

CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities

Neo Security Team NST® - Aviso 15 - 00/00/06 Programa: phpBB 2.0.15 Página principal: http://www.phpbb.com Versiones vulnerables: phpBB 2.0.15 y versiones anteriores Riesgo: ¡¡Alto riesgo!! Impacto: Múltiples vulnerabilidades DoS. Descripción phpBB es un paquete de foros de código abierto de alto...

CVE-2026-18466 WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation

The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a Subscriber account to create an unlimited number of options in the database, each of which is loaded on every page request...

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability. This vulnerability stems from the lack of a bot mitigation mechanism in the /v1/account/register registration path, which may allow malicious automated syste...

EUVD-2022-41818

Malicious code in bioql PyPI...

Fedora 36 : nextcloud (2022-902df3b060)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-902df3b060 advisory. Security fix for CVE-2022-39346 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

CVE-2022-39346

CVE-2022-39346 affects Nextcloud Server. Affected versions did not properly limit user display names, which could allow a malicious user to overload the backing database and trigger a denial of service. OpenSUSE advisory confirms the issue and attributes exploitation to missing length validation ...

in jspark311/buriedunderthenoisefloor

Description Uploaded files represent a significant risk to applications. The first step in many attacks is to get some code to the system to be attacked. Then the attack only needs to find a way to get the code executed. https://github.com/jspark311/BuriedUnderTheNoiseFloor/ is vulnerable to remo...

MediaWiki GlobalNewFiles 资源管理错误漏洞

GlobalNewFiles is an extension of the MediaWiki Foundation that provides a special page to view all files of a wiki farm globally. GlobalNewFiles suffers from a Resource Management Error vulnerability that stems from the fact that all existing versions of GlobalNewFiles are affected by an...

BSS Continuity CMS Denial of Service Vulnerability

BSS Continuity CMS is a content management system CMS from BSS UK. A denial of service vulnerability exists in BSS Continuity CMS version 4.2.22640.0. An attacker can exploit this vulnerability to cause the underlying database to run with an overload...

CVE-2014-3447 - Remote Denial Of Service in BSS Continuity CMS

Vulnerability title: Remote Denial Of Service in BSS Continuity CMS CVE: CVE-2014-3447 Vendor: BSS Product: Continuity CMS Affected version: 4.2.22640.0 Fixed version: N/A Reported by: Jerzy Kramarz Details: By repeatedly calling node enumeration script, a remote unauthenticated attacker can...