49801 matches found
CVE-2025-66390
In Microsoft Azure API Management through 2025-10-17, when self-service signup username/password Basic Authentication is enabled in Tenant A, an attacker can reuse the registration flow by changing the hostname or tenant identifier to Tenant B, even when Tenant B has signup disabled at the UI...
CVE-2025-66390
In Microsoft Azure API Management through 2025-10-17, when self-service signup username/password Basic Authentication is enabled in Tenant A, an attacker can reuse the registration flow by changing the hostname or tenant identifier to Tenant B, even when Tenant B has signup disabled at the UI...
📄 WordPress WP Extended 3.0.12 Unauthenticated Blind SQL Injection
WordPress WP Extended plugin version 3.0.12 contains an unauthenticated time-based blind SQL injection vulnerability through X-Forwarded-For. A remote attacker can inject SQL through the vulnerable parameter and infer database contents through response timing. This proof of concept exploit...
CVE-2026-65317: Server-Side Request Forgery (SSRF)
Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middleware bypass that allows unauthenticated remote attackers to make the server issue arbitrary HTTP requests by supplying a crafted Origin header and attacker-controlled host an...
CVE-2026-56586: Undefined Security Weakness
HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data...
CVE-2026-56585: Protection Mechanism Failure
HCL IEM was affected with the Anti Clickjacking XFrame Options Header Missing. It may allow attackers to embed the application in malicious pages and induce unauthorized user actions...
PT-2026-62421
Name of the Vulnerable Software and Affected Versions Netty versions 4.1.0.Final through 4.1.135.Final Netty versions 4.2.0.Final through 4.2.15.Final Description A security control bypass exists during the origin evaluation process. The CorsHandler includes a shortCircuit configuration intended ...
PT-2026-63313
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The ToHook function in services/webhook/general.go decrypts the HeaderAuthorizationEncrypted field and returns the plaintext authorization header in the API response. This allows repository...
PT-2026-63317
Name of the Vulnerable Software and Affected Versions websocket-driver versions prior to 0.8.2 Description Remote clients can crash a TCP-backed WebSocket server by sending a malformed Host header. The WebSocket::Driver.server method passes this header to URI.parse in the...
CVE-2025-66390: Improper Access Control
In Microsoft Azure API Management through 2025-10-17, when self-service signup username/password Basic Authentication is enabled in Tenant A, an attacker can reuse the registration flow by changing the hostname or tenant identifier to Tenant B, even when Tenant B has signup disabled at the UI...
Security Vulnerabilities fixed in Thunderbird 140.13 — Mozilla
The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. We are aware that exploit code for...
EulerOS Virtualization 2.12.0 : python3 (EulerOS-SA-2026-2795)
According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : User-controlled header names and values containing newlines can allow injecting HTTP headers.CVE-2026-0865 Tenable has extracted t...
CVE-2026-50755
A vulnerability in DayuanJiang next-ai-draw-io version 0.4.13 allows a remote attacker to obtain sensitive information by manipulating the X-Forwarded-For header value. This issue can lead to the disclosure of internal information via header spoofing. Currently, there is no information regarding ...
PT-2026-62414
Name of the Vulnerable Software and Affected Versions Verba RAG application version 2.1.3 Description A server-side request forgery SSRF issue combined with a same-origin middleware bypass allows unauthenticated remote attackers to force the server to issue arbitrary HTTP requests. By providing a...
CVE-2026-50755
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value...
PT-2026-61961
A vulnerability was identified in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This affects the function getTenantId of the file /api/system/sys/dept/page of the component MyBatis-Plus Tenant Plugin. Such manipulation of the argument X-Tenant-Id leads to authorization...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2755)
According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via...
CVE-2026-50755
An issue in DayuanJiang next-ai-draw-io 0.4.13 allows a remote attacker to obtain sensitive information via the X-Forwarded-For header value...
