1258032 matches found
CVE-2026-87076 Tanium addressed an information disclosure vulnerability in Discover.
Tanium addressed an information disclosure vulnerability in Discover...
EUVD-2026-81081
Tanium addressed an information disclosure vulnerability in Discover...
cachet_2.4.0-dev
CVE-2021-39174 Cachet 2.4.0-dev CVE-2021-39174 Cachet 2.4.0-dev 用の Python3 スクリプトです。Twig サーバーサイドテンプレートインジェクションを介した情報漏洩と RCE を実現します。RCE を実行するには、ユーザーの API キーが必要です。API キーを SQL インジェクション（CVE-2021-39165）で取得する方法については、以下の Leave Songs のリンクを参照してください。 はじめに プログラムの実行 データ抽出 root@kitploit: python3...
CVE-2024-1302---Badgermeter-moni-tool-Sensitive-information-exposure
CVE-2024-1302 --- Badgermeterモニタリングツール - 機密情報の露呈 https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1302: 7.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N | CWE-200. Software link : https://www.s-can.at/en/product/monitool/ Version :...
CVE-2025-65345
CVE-2025-65345 – laravel-file-manager v3.3.1 における ZIP 機能を介した認証済みパストラバーサルによるファイルシステム情報漏えい 🧭 概要 laravel-file-manager v3.3.1 以下には、認証済みディレクトリトラバーサル Directory Traversal の脆弱性が存在します。ファイルマネージャーインターフェースにアクセスできる攻撃者が、不適切なパス検証により、zip/アーカイブ機能を使用して、意図された範囲外のファイルやディレクトリを含むアーカイブを作成できる可能性があります。 🧱 影響を受けるコンポーネント...
CVE-2026-92729
SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit arbitrary funnel definitions to retrieve trace analytics including identifiers, durations, span counts, service topology, and...
CVE-2026-91106
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
CVE-2026-91102
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
CVE-2026-91101
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
DEBIAN-CVE-2026-91098
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
CVE-2026-91098
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
CVE-2026-73442
On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs or a system receiving forwarded log output to obtain the peer devic...
CVE-2026-19632
TranslatePress 密码重置链接泄露导致管理员账户接管 CVE： CVE-2026-19632 | CVSS： 9.8（严重） 通过 WordPress 的 TranslatePress 插件实现未认证账户接管。 从 CVE 发布到可用的 Day-One PoC 所用时间：5 小时 9 分 40 秒 影响版本至 3.3.1（含）；该问题已在 3.3.2 中修复。 TLDR TranslatePress 可以翻译 WordPress 外发的电子邮件，并将其翻译后的字符串保存到数据库中。 TranslatePress 还会将包含完整重置链接（含密钥）的密码重置邮件直接保存到翻译表中...
Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data
深入解析 CVE-2026-20805：Windows DWM 漏洞如何泄露敏感数据 CVE‑2026‑20805：Windows 桌面窗口管理器（Desktop Window Manager）的一个缺陷，可导致本地信息泄露。需要低权限，无需用户交互。CVSS 评分为 5.5（中危）。已被积极利用，并列入 CISA KEV 目录；补丁已于 2026 年 1 月发布。 深入解析 CVE 2026 20805：Windows DWM 漏洞如何泄露敏感数据 1 执行摘要 CVE 2026 20805 是桌面窗口管理器（DWM）中的一个信息泄露缺陷——DWM 是渲染桌面、合成窗口以及加速基于 G...
CVE-2025-30208
🔥 CVE-2025-30208 Vite任意ファイル読み取り脆弱性スキャナー CVE-2025-30208向け高度な脆弱性スキャナー（エンタープライズグレードの機能搭載） Vite任意ファイル読み取り脆弱性検出のためのプロフェッショナルペネトレーションテストツール 🚀 クイックスタート • 📋 機能 • 🔧 使用方法 • 📊 例 • 🛡️ セキュリティ 📖 概要 これは、Vite開発サーバーの CVE-2025-30208...
CVE-2026-92720
creationtimestamp| type| source ---|---|--- 2026-09-16 19:00:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvnt5g54g22f 2026-09-16 20:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvnwwr2fvf2r...
EUVD-2026-81008
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users...
EUVD-2026-81007
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
EUVD-2026-81005
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
CVE-2026-91104 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...