tomcat9 security update

An update is available for tomcat9. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Tomcat is the servlet container that is used in the official Reference...

EUVD-2026-83587

OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameters to plaintext application logs without redaction. Attackers with access to application stdout or centralized logging systems can capture base64-encoded credentials to replay MCP requests...

The vulnerability of the Serial Wire Debug interface (SWD) in the highly integrated wireless system on chip (SoC) Realtek RTL8762C allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...

CVE-2026-1255 YS LeadGen – Popups, Opt-ins & Lead Capture <= 2.1.4 - Unauthenticated Information Disclosure in 'ysleadgen_get_captured_data' AJAX Action

The YS LeadGen plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 due to the 'ysleadgengetcaptureddata' AJAX action being accessible to unauthenticated users. This makes it possible for unauthenticated attackers to retrieve all capture...

EUVD-2026-83551

The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 2.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2026-16557

The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-builder content through an authenticated AJAX action, allowing any authenticated user Subscriber+ to disclose the page-builder content of arbitrary non-public draft, pending, private...

.NET 10.0 security, bug fix, and enhancement update

An update is available for dotnet10.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross platfo...

EUVD-2026-83498

The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-builder content through an authenticated AJAX action, allowing any authenticated user Subscriber+ to disclose the page-builder content of arbitrary non-public draft, pending, private...

CVE-2020-19360

Fhem FileLoglogWrapper Vulnérabilité de lecture arbitraire de fichier CVE-2020-19360 Description de la vulnérabilité FHEM version 6.0 contient une vulnérabilité d'inclusion de fichier, due au paramètre FHEM/FileLoglogWrapper file qui permet à un attaquant d'inclure des fichiers, entraînant une...

CVE-2018-7690

CVE-2018-7690 SSC REST API содержит уязвимости небезопасных прямых ссылок на объекты Insecure Direct Object Reference, IDOR, которые позволяют аутентифицированным пользователям получать доступ к произвольным данным локальных пользователей и пользователей LDAP через метод POST, а также к...

CVE-2025-65681

CVE-2025-65681 Un problème a été découvert dans Overhang.IO tutor-open-edx overhangio/tutor 20.0.2 permettant à des attaquants locaux non autorisés d'accéder à des informations sensibles en raison de l'absence d'en-têtes HTTP de contrôle de cache appropriés et de vérifications de session côté...

CVE-2021-3131

CVE-2021-3131 Description suggérée Le serveur Web dans 1C:Enterprise 8 avant la version 8.3.17.1851 envoie des identifiants encodés en base64 dans le paramètre d'URL 'creds'. Type de vulnérabilité Autre CWE-522 Protections insuffisantes des identifiants Vendeur du produit 1C Company Code de base ...

CVE-2023-23752

CVE-2023-23752 이것은 CVE-2023-23752 취약점에 대한 개념 증명 코드입니다. 이를 통해 공격자는 대상 애플리케이션에서 사용자 이름, 비밀번호, 데이터베이스 이름과 같은 민감한 정보를 추출할 수 있습니다. 사용법 이 코드를 사용하려면 다음 단계를 따르세요: 1. 이 저장소를 클론하거나 CVE-2023-23752.py 파일을 다운로드하세요. 2. 시스템에 Python 3와 필수 패키지argparse 및 requests가 설치되어 있는지 확인하세요. 3. 터미널 또는 명령 프롬프트를 열고...

extrude

extrude Analyse binaries for missing security features, information disclosure and more. 🚧 Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE Windows binaries will be supported soon. Usage root@kitploit: Usage: extrude flags file Flags: -a, --all...

CVE-2025-65670

CVE-2025-65670 Une référence directe d'objet non sécurisée IDOR dans classroomio 0.1.13 permet aux étudiants d'accéder à des points de terminaison sensibles d'administrateur/enseignant en manipulant les identifiants de cours dans les URL, ce qui entraîne la divulgation non autorisée de données...

cve-2019-1108

Эксплуатация CVE-2019-1108 root@kitploit: CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the...

ImageMagick-lfi-poc

ImageMagick-lfi-poc ImageMagick Чтение произвольных файлов - CVE-2022-44268 также используется в htb pilgrimage ImageMagick LFI PoC CVE-2022-44268 Исследователи из MetabaseQ обнаружили CVE-2022-44268, т.е. ImageMagick 7.1.0-49 уязвим для раскрытия информации. При разборе PNG-изображения например,...

CVE-2023-28432

CVE-2023-28432 CVE-2023-28432 Preuve de concept Minio est un framework de stockage d'objets multi-cloud. Dans un déploiement en cluster à partir de RELEASE.2019-12-17T23-16-33Z et avant RELEASE.2023-03-20T20-16-18Z, MinIO renvoie toutes les variables d'environnement, y compris MINIOSECRETKEY et...

CVE-Newgen-Software-Advisories

Newgen Software – Доказательства концепции CVE Этот репозиторий содержит материалы доказательств концепции PoC и техническую документацию по нескольким уязвимостям CVE , обнаруженным в продуктах, разработанных Newgen Software Technologies Limited. Уязвимости, описанные здесь, являются публично...

CVE-2019-15514

CVE-2019-15514 Тип: Раскрытие информации Затронутые пользователи, версии, устройства: Все пользователи Telegram До сих пор не исправлено. brute.py — доступный эксплойт, написанный на Python. Описание Предположим, ali — хактивист. Его Telegram ID пользователя — 21788973, а номер мобильного скрыт. ...