148 matches found
CVE-2026-5846 Hard-coded Cryptographic Key in Watchfire Controllers
The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management interface. These keys are embedded in plaintext within the...
Beyond Cloud Uptime: API Security and AI Resilience for 2026
...
Splunk Enterprise REST API Code Execution
The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Apache Superset: Improper Neutralization of custom SQL on embedded context
A guest user could exploit a chart data REST API and send arbitrary SQL statements that on error could leak information from the underlying analytics database.This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.Users are recommended to upgrade to version 3.1.1 or 3.0.4, whic...
Security Bulletin: This Power System update is being released to address CVE-2026-7254
Summary The BMC's HTTPS interface is vulnerable to denial of service attacks by unauthenticated network users. Vulnerability Details CVEID:CVE-2026-7254 DESCRIPTION: OpenBMC HTTPS service is vulnerable to attacks by unauthenticated network users which can result in denial of service. CWE:CWE-1284...
CVE-2025-15554
Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin passwords...
CVE-2026-33915 OpenEMR Missing ACL Checks on Insurance Company API Routes
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, five insurance company REST API routes are missing the RestConfig::requestauthorizationcheck call that every other data-modifying route in the standard API uses. This...
Jinan USR IOT USR-W610 security vulnerability
Jinan USR IOT USR-W610 is a serial-to-Ethernet converter developed by Jinan USR IOT. There is a security vulnerability in the Jinan USR IOT USR-W610. This vulnerability stems from the fact that the embedded Web interface of the device does not support HTTPS/TLS authentication and uses HTTP basic...
CVE-2026-24434
Shenzhen Tenda AC7 firmware version V03.03.03.01cn and prior does not implement CSRF protections for administrative functions in the web management interface. The interface does not enforce anti-CSRF tokens or robust origin validation, which can allow an attacker to induce a logged-in administrat...
EUVD-2001-0097
Malware in sbrugna...
EUVD-2013-3542
Malware in sbrugna...
EUVD-2017-8910
Malware in sbrugna...
EUVD-2009-2709
Malware in sbrugna...
EUVD-2009-1078
Malware in sbrugna...
EUVD-2015-1447
Malware in sbrugna...
EUVD-2018-1205
Malware in sbrugna...
EUVD-2020-24870
Malware in sbrugna...
EUVD-2020-24559
Malware in sbrugna...