461 matches found
CVE-2026-26416
An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests...
PT-2026-23478
Name of the Vulnerable Software and Affected Versions Tata Consultancy Services Cognix Recon Client version 3.0 Description A lack of proper authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 enables remote attackers to access application...
CVE-2026-26417: Improper Access Control
A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...
CVE-2026-26418
Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...
CVE-2026-26418
Tata Consultancy Services Cognix Recon Client v3.0 is vulnerable to a flaw where the Web API layer fails to enforce proper authentication and authorization controls. This missing validation (categorized under CWE-306 and CWE-862 ) allows remote attackers to access various application functions wi...
CVE-2026-26418
Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...
PT-2026-23477
Name of the Vulnerable Software and Affected Versions Tata Consultancy Services Cognix Recon Client version 3.0 Description A broken access control issue exists in the password reset functionality. Authenticated users can reset passwords for any user account by sending specially crafted requests...
CVE-2026-26416: Improper Privilege Management
An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries via crafted requests...
Tata Consultancy Services Cognix Recon Client 安全漏洞
Tata Consultancy Services Cognix Recon Client is a financial reconciliation software developed by Tata Consultancy Services in India. Version 3.0 of Tata Consultancy Services Cognix Recon Client contains a security vulnerability. This vulnerability stems from an authorization bypass issue, which...
CVE-2026-26417
The Tata Consultancy Services Cognix Recon Client v3.0 contains a broken access control vulnerability in its password reset functionality. Authenticated users can reset passwords for arbitrary user accounts by submitting crafted API requests to the endpoint http://clientreconhost/trapeze-client/p...
CVE-2026-26418: Improper Access Control
Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...
CVE-2026-26417
A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset passwords of arbitrary user accounts via crafted requests...
CVE-2026-26418
Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionality without restriction via the network...
Tata Consultancy Services Cognix Recon Client 安全漏洞
Tata Consultancy Services Cognix Recon Client is a financial reconciliation software developed by Tata Consultancy Services in India. Version 3.0 of Tata Consultancy Services Cognix Recon Client contains a security vulnerability. This vulnerability stems from an access control flaw in the passwor...
Tata Consultancy Services Cognix Recon Client 安全漏洞
Tata Consultancy Services Cognix Recon Client is a financial reconciliation software developed by Tata Consultancy Services in India. Version 3.0 of Tata Consultancy Services Cognix Recon Client contains a security vulnerability. This vulnerability stems from the lack of authentication and...
Kestrel
Kestrel LLM-Assisted Bug Bounty Hunting Platform for Kali L...
gotham-recon
Documentation Complete du Systeme d'Agents CrewAI Guide t...
PT-2025-132: Server-side Request Forgery (SSRF) in OpenPDF
The vulnerability was identified in OpenPDF, versions 2.0.3. The discovered vulnerability allows an attacker craft arbitrary HTTP requests that the vulnerable server will send to both external services and internal network endpoints. By exploiting this, the attacker can exfiltrate sensitive data...
📄 dotCMS 24.04.24 Vulnerability Scanner
dotCMS version 24.04.24 advanced exploitation python scanning script that looks for local file inclusion, data exposure, SQL injection, and more. ============================================================================================================================================= | Title :...