CloudPanel-CVE-2023-33747

CloudPanel-CVE-2023-33747...

CVE-2024-54085

CVE-2024-54085: Critical Authentication Bypass Vulnerability in AMI MegaRAC BMC Affected Systems The vulnerability affects a wide range of server hardware from major manufacturers: AMI MegaRAC SPx : versions 12.x up to 12.7 and 13.x up to 13.5 HPE Cray XD670 : versions 1.09, 1.13, 1.17 Asus...

SQL Server Management Studio Code Execution

The vulnerability of the SQL Server Management Studio SSMS and the Visual Studio Tools for Applications VSTA environment used in Microsoft Visual Studio development tools is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary co...

CVE-2026-103572

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

EUVD-2026-99027

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-103572

A code injection vulnerability exists in Visual Studio Tools for Applications and SQL Server Management Studio . Due to improper control of code generation, an unauthorized attacker can execute arbitrary code over a network. This vulnerability has a CVSS 3.1 score of 8.8 and is reported to have a...

Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

PT-2026-118111

Уязвимость среды для администрирования баз данных SQL Server Management Studio SSMS и набора инструментов Visual Studio Tools for Applications VSTA средства разработки программного обеспечения Microsoft Visual Studio связана с неверным управлением генерацией кода. Эксплуатация уязвимости может...

CVE-2026-103572: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

Microsoft Visual Studio: CVE-2026-103572: Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

PT-2026-111805

Name of the Vulnerable Software and Affected Versions Visual Studio Tools for Applications affected versions not specified SQL Server Management Studio affected versions not specified Visual Studio Copilot extension affected versions not specified Description Improper control of code generation...

mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Bajo los términos del Contrato DE-NA0003525 con NTESS, el Gobierno de los EE. UU. retiene ciertos derechos sobre este software. MOSE es una herramienta de post-explotación que ayuda a los...

CVE-2026-87686

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

CVE-2026-87686

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

CVE-2026-87686

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1 . The vulnerability is caused by the web dispatcher routine evaluating internal management VLAN trust decisions based on the client-supplied HTTP hos...

EUVD-2026-94670

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

CVE-2026-87686: Authentication Bypass by Spoofing

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

CVE-2026-107206 LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

Brocade Fabric OS authentication and access control bypass via HTTP host header spoofing

: An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual...

Microsoft SQL Server Management Studio Privilege Escalation

The vulnerability of the Microsoft SQL Server Management Studio SSMS management tool is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...