CVE-2025-62168

CVE-2025-62168 Divulgation d'informations du proxy Squid dans la gestion des erreurs Scanner Détection & PoC "En raison d'une défaillance dans la rédaction des identifiants d'authentification HTTP, Squid est vulnérable à une attaque de divulgation d'informations. Gravité : Ce problème permet à un...

CVE-disclosures

CVE-2026-3171 & CVE-2026-3170 – Archana M Divulgations officielles de vulnérabilités par Archana M. 🔹 CVE-2026-3171 Produit : SourceCodester / Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Type de vulnérabilité : Cross-Site Scripting CWE-79 Fichier concerné : /queue.php Vecteur...

CVE-2026-107299 msgpack5: Reserved byte can cause unbounded stream buffering

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder treats the reserved MessagePack byte 0xc1 as incomplete input instead of invalid input. When 0xc1 begins a stream, subsequent data remains buffered while the decoder waits for bytes that...

kernel: vsock/vmci: fix UAF when peer resets connection during handshake

A flaw was found in the vsock/vmci component of the Linux kernel. A remote attacker could exploit a Use-After-Free UAF vulnerability when a peer resets a connection during the handshake process. This occurs because the system incorrectly handles reset packets, leading to a pending socket being le...

CVE-2026-14905

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive...

CVE-2021-32162

..| CSRFtoCommandInjection2 |.. Description : Exploiter une attaque de falsification de requête intersite CSRF pour obtenir une injection de commandes via la fonctionnalité Gestionnaire de fichiers de Webmin Version testée : Webmin 1.973 dernière version de GitHub 07/03/2021 Type d'attaque : À...

CVE-2026-14269 IBM DataPower Gateway Buffer Overflow

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. An unauthenticated remote attacker could overflow the buffer and execute arbitrary...

CVE-2026-79993

A flaw was found in Apache ZooKeeper. The deleteContainer opcode is processed without verifying Access Control List ACL permissions. A remote, unauthenticated attacker with network access to the ZooKeeper client port can delete any empty persistent znode, including container and TTL nodes. This c...

CVE-2023-30146

CVE-2023-30146 - Exploit de caméra Web Assmann/HooToo - Exposition de données sensibles Description Un problème a été découvert dans les caméras IP de marque HooToo et Assmann. Le firmware stocke les identifiants de l'administrateur et des utilisateurs dans la sauvegarde en texte clair. La...

CVE-2026-16161

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

CVE-2026-16163

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write...

CVE-2025-492026

نشورة أمنية: CVE-2025-492026 ملخص تم تحديد ثغرة في Copilot AI تؤدي إلى تضمين رابط تشعبي غير مقصود في قسم "مصدر الرابط" كلما استرد Copilot استعلام ويب. تسبب هذه المشكلة في نقر المستخدمين على روابط لـ https://www.collectingflags.com حتى عندما يكون الموضوع غير ذي صلة، مما قد يؤدي إلى تضليل أو تنقل غ...

CVE-2020-10128

CVE-2020-10128 - Le produit SearchBlox avant V-9.2.1 est vulnérable au Cross-Site Scripting stocké Description du produit : SearchBlox simplifie la recherche en entreprise pour les organisations complexes. Les outils intuitifs et intelligents de SearchBlox offrent une configuration prête à...

CVE-2024-48197

CVE-2024-48197 XSS منعكس في AudioCodes MP-202b الوصف ثغرة برمجة نصية عبر المواقع XSS في Audiocodes MP-202b الإصدار 4.4.3 تسمح لمهاجم عن بعد بتصعيد الصلاحيات عبر صفحة تسجيل الدخول للواجهة الويب. معلومات إضافية غير متاح نوع الثغرة برمجة نصية عبر المواقع XSS منعكس البائع Audiocodes قاعدة كود المنتج...

EUVD-2026-94996

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administrative access due to failure to reject empty passwords during LDAP authentication...

CVE-2026-14508

The IBM DataPower Gateway is vulnerable to a use-after-free condition (CWE-416) that could allow a remote attacker to cause a denial of service and obtain sensitive information . Affected versions include 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 ...

CVE-2026-14999

The IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to an authentication bypass. The root cause is the improper verification of cryptographic signatures , which allows a remote attacker to f...

EUVD-2026-94965

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a buffer overflow...

CVE-2026-16165 IBM DataPower Gateway NULL Pointer Dereference

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference...

CVE-2026-16165

IBM DataPower Gateway is vulnerable to a NULL pointer dereference (CWE-476), which could allow a remote attacker to cause a denial of service . The affected versions include 10.5.0.0 through 10.5.0.22 , 10.6.1 through 10.6.6 , 10.6.0.0 through 10.6.0.10 , and 11.0.0.0 through 11.0.0.2 . IBM recom...