20136 matches found
CVE-2023-32560
Questo repository non contiene un README...
CVE-2026-65087
NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering...
EUVD-2026-66105
NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering...
CVE-2026-76197
creationtimestamp| type| source ---|---|--- 2026-08-25 19:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwiwvuyjr27 2026-08-25 20:08:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwmonpek32p 2026-08-25 23:40:05+00:00| seen|...
CVE-2022-50998
creationtimestamp| type| source ---|---|--- 2026-08-25 18:54:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwilrryzn2j...
CVE-2026-78468
FluentCRM Pro for WordPress (all versions up to and including 3.1.12 ) is vulnerable to SQL Injection caused by insufficient escaping of a user-supplied parameter and lack of sufficient preparation on an existing SQL query. An authenticated attacker with Author-level or higher access can append a...
EUVD-2026-65579
The FluentCRM Pro – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.1.12 due to insufficient escaping on the user supplied parameter and lack of sufficient...
CVE-2026-69104
JFrog Artifactory (self-managed) is affected by an insufficient permission enforcement flaw in repository migration operations . An authenticated user with low privileges can initiate migration operations on repositories for which they lack the required permissions, potentially leading to informa...
MINI-9PM3-VQJM-G537
Bulletin has no description...
DEBIAN-CVE-2026-54874
Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...
CVE-2026-79673
Ech0 before 4.4.3 protects the PUT /user endpoint with the profile:read scope, a read-only scope, but allows write operations including password changes. An attacker with an admin's profile:read access token can change the admin's password and login to obtain an unrestricted session token that...
CVE-2026-18547
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Textarea Profile Field with HTML Support DOM Gadget via id Attribute in all versions up to, and including, 2.12....
EUVD-2026-65441
Ech0 before 4.4.3 protects the PUT /user endpoint with the profile:read scope, a read-only scope, but allows write operations including password changes. An attacker with an admin's profile:read access token can change the admin's password and login to obtain an unrestricted session token that...
EUVD-2026-65459
The Media Sweep – WordPress Media Cleaner plugin for WordPress is vulnerable to generic SQL Injection via the 'fields' parameter in all versions up to, and including, 1.1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...
CVE-2026-77824
Media Sweep – WordPress Media Cleaner (all versions up to and including 1.1.3 ) is affected by a SQL Injection vulnerability in the 'fields' parameter of its REST API. The root cause is insufficient escaping of the user-supplied parameter combined with lack of proper query preparation, as seen in...
Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-
Webmin 1.580 RCE-Ausführungsanleitung Schnellreferenz für die Ausführung authentifizierter Remote-Code-Execution RCE auf Webmin 1.580 über die Komponente /file/show.cgi. 1. Angriffsmaschine Listener Führen Sie diesen Befehl auf Ihrem lokalen Rechner aus, um die eingehende Verbindung...
CVE-2026-59296
A flaw was found in Micrometer's StatsD and Logging meter registries. This vulnerability allows a remote attacker to inject line terminators into metric data, such as names or tag values, due to insufficient sanitization of untrusted input. Exploitation can lead to the spoofing of arbitrary...
CVE-2023-1430
Update 2023-06-12: Sie benötigen den Snippet nicht mehr. WPManageNinja hat die Sicherheitslücke zwei Stunden nach der öffentlichen Offenlegung gepatcht 93 Tage nach der Meldung. Update 2024-01-27: Das verwandte Problem mit ewigen Hash-Werten ist nun vollständig behoben. Verantwortungsvolle...
CVE-2026-77144
The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying permission check confirmed only that the submitting user held any organizer role. A user with frontend event managemen...