CVE-2023-49581

SAP GUI for Windows and SAP GUI for Java allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the unauthenticated attacker to write data to a database table. By doing so the attacker could increase...

CVE-2020-12814

A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI...

CVE-2024-39600

Under certain conditions, the memory of SAP GUI for Windows contains the password used to log on to an SAP system, which might allow an attacker to get hold of the password and impersonate the affected user. As a result, it has a high impact on the confidentiality but there is no impact on the...

CVE-2023-49580

SAP GUI for Windows and SAP GUI for Java - versions SAPBASIS 755, SAPBASIS 756, SAPBASIS 757, SAPBASIS 758, allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the unauthenticated attacker to create...

celery-director (>=0.5.0, <=0.7.0), elementary-flask (>=0.0.1.dev7, <=0.0.1.dev12) +11 more potentially affected by CVE-2026-21860 via werkzeug (2.1.1)

werkzeug PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - celery-director =0.5.0, =0.0.1.dev7, =0.0.1, =1.0.0, =1.3.0, =0.7.0b10, =1.1.2, =1.1.8 Source cves: CVE-2026-21860 Source advisory:...

UBUNTU-CVE-2023-54081

In the Linux kernel, the following vulnerability has been resolved: xen: speed up grant-table reclaim When a grant entry is still in use by the remote domain, Linux must put it on a deferred list. Normally, this list is very short, because the PV network and block protocols expect the backend to...

The vulnerability of the SAP GUI graphical user interface for Windows, related to access control errors, allows a intruder to disclose protected information and execute arbitrary code.

The vulnerability of the SAP GUI graphical user interface for Windows relates to access control errors. Exploiting this vulnerability allows an attacker to disclose protected information and execute arbitrary code...

CVE-2025-40891 HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0

A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of network traffic data. An unauthenticated attacker can send specially crafted network packets at two different times to inject HTML tags into asset attributes across t...

PT-2025-51832

PGAdmin, the popular PostgreSQL GUI, had a critical flaw! 😱 Attackers could execute shell commands on your host. Basically, they could make your computer do pirouettes. 🕺 The vulnerability CVE-2023-45255 allowed remote code execution via specially crafted SQL queries. So, if you’re managing...

Exploit for Deserialization of Untrusted Data in Facebook React

🔍 Next.js RCE Scanner - CVE-2025-55182 & CVE-2025-66478...

Comparing AI Agents to Cybersecurity Professionals in Real-World Penetration Testing

We present the first comprehensive evaluation of AI agents against human cybersecurity professionals in a live enterprise environment. We evaluate ten cybersecurity professionals alongside six existing AI agents and ARTEMIS, our new agent scaffold, on a large university network consisting of 8,00...

EUVD-2025-202268

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiSandbox version 5.0.0 through 5.0.2 and before 4.4.7 GUI allows a remote privileged attacker to execute unauthorized code or commands via crafted HTTP or HTTPS request...

OS command injection in GUI backup options

...

nice-gui-utils (>=0.1.2.dev0, <=0.1.2.dev3) potentially affected by CVE-2025-66469 via nicegui (1.4.1)

nicegui PYPI version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - nice-gui-utils =0.1.2.dev0, =0.1.2.dev3 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

nice-gui-utils (0.1.6) potentially affected by CVE-2025-66469 via nicegui (1.4.3)

nicegui PYPI version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - nice-gui-utils 0.1.6 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

nice-gui-utils (>=0.1.2, <=0.1.5) potentially affected by CVE-2025-66469 via nicegui (1.4.2)

nicegui PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - nice-gui-utils =0.1.2, =0.1.5 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

flinventory-gui (>=0.10.0, <=0.11.1), synth-mapping-helper (1.5.11) +1 more potentially affected by CVE-2025-66469 via nicegui (2.12.1)

nicegui PYPI version 2.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - flinventory-gui =0.10.0, =0.2.0, =0.2.11 Source cves: CVE-2025-66469 Source advisory: OSV:GHSA-72QC-WXCH-74MG...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Management GUI are now addressed in 5.2.3.5 and 6.0.0.0 (CVE-2025-6493)

Summary The following vulnerabilities, which may affect IBM Storage Scale when the Management GUI is configured and could lead to weaker-than-expected security, have been remediated in Storage Scale version 5.2.3.5 and later and 6.0.0.0 and later CVE-2025-6493 Vulnerability Details...

[SECURITY] Fedora 43 Update: kf6-kguiaddons-6.20.0-2.fc43

KDE Frameworks 6 Tier 1 addon with various classes on top of QtGui...

celery-director (>=0.5.0, <=0.7.0), elementary-flask (>=0.0.1.dev7, <=0.0.1.dev12) +11 more potentially affected by CVE-2025-66221 via werkzeug (2.1.1)

werkzeug PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - celery-director =0.5.0, =0.0.1.dev7, =0.0.1, =1.0.0, =1.3.0, =0.7.0b10, =1.1.2, =1.1.8 Source cves: CVE-2025-66221 Source advisory:...