6234 matches found
Hipcam-RTSP-Format-Validation-Vulnerability
Hipcam RealServer/V1.0 RTSP Format Validation Vulnerability Proof-of-Concept | CVE-2023-50685 Proof-of-Concept for RTSP Service Format Validation Vulnerability in Hipcam RealServer/V1.0. Description This POC exploits a format validation vulnerability in the Real Time Streaming Protocol RTSP servi...
CVE-2026-76173
Blind SQL injection vulnerability in the public endpoint public/webhook/receiver.php of the WhatsApp module for Dolibarr 1.9. The phone number value derived from the data.key.remoteJid parameter, received via a JSON request, is incorporated into an SQL query without escaping or parameterization...
CVE-2026-76173
A Blind SQL injection vulnerability exists in the WhatsApp module for Dolibarr 1.9 (developed by Sgestion / EasySoft). The flaw is located in the public endpoint public/webhook/receiver.php, where the data.key.remoteJid parameter from a JSON request is processed without proper escaping or paramet...
CVE-2026-76173 SQL Injection in WhatsApp for Dolibarr by Sgestion / EasySoft
Blind SQL injection vulnerability in the public endpoint public/webhook/receiver.php of the WhatsApp module for Dolibarr 1.9. The phone number value derived from the data.key.remoteJid parameter, received via a JSON request, is incorporated into an SQL query without escaping or parameterization...
EUVD-2026-124333
Blind SQL injection vulnerability in the public endpoint public/webhook/receiver.php of the WhatsApp module for Dolibarr 1.9. The phone number value derived from the data.key.remoteJid parameter, received via a JSON request, is incorporated into an SQL query without escaping or parameterization...
CVE-2026-76173: Sgestion / EasySoft WhatsApp for Dolibarr: Blind SQL injection vulnerability in the public endpoint `public/webhook/receiver.php` of the WhatsApp module for…
Blind SQL injection vulnerability in the public endpoint public/webhook/receiver.php of the WhatsApp module for Dolibarr 1.9. The phone number value derived from the data.key.remoteJid parameter, received via a JSON request, is incorporated into an SQL query without escaping or parameterization...
CVE-2026-95783
A vulnerability exists in a network-facing component that may, under certain conditions, result in service disruption. Successful exploitation could cause temporary unavailability of affected functionality...
CVE-2026-121287
An unauthenticated attacker on an adjacent network segment can send crafted RIPv2 packets to a RIP-enabled interface on the device to trigger the Rip agent crash without providing valid credentials. Repeated exploitation reliably interrupts routing service on the affected device, which may also...
CVE-2026-121287
An unauthenticated attacker on an adjacent network segment can exploit a vulnerability in the Rip agent by sending crafted RIPv2 packets to a RIP-enabled interface. This vulnerability, associated with a CWE-124 (Buffer Underwrite) , can cause the Rip agent to crash. Consistent exploitation result...
CVE-2026-95783
A vulnerability exists in a network-facing component that may, under certain conditions, result in service disruption . Successful exploitation could lead to the temporary unavailability of the affected functionality. While the CVSS v3.1 score indicates a High severity (7.5) with a high impact on...
EUVD-2026-122894
A vulnerability exists in a network-facing component that may, under certain conditions, result in service disruption. Successful exploitation could cause temporary unavailability of affected functionality...
CVE-2026-109794
SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing excessive resource utilization and...
EUVD-2026-120679
SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing excessive resource utilization and...
PT-2026-141243
SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing excessive resource utilization and...
PT-2026-144672
A vulnerability exists in a network-facing component that may, under certain conditions, result in service disruption. Successful exploitation could cause temporary unavailability of affected functionality...
CVE-2026-109794: SAP_SE: SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource…
SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing excessive resource utilization and...
CVE-2026-85736
Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. Prior to 5.2.3, connection creation or update stored attacker-chosen absolute SSL and SSH file paths, and later connection cleanup passed those stored paths to fs.unlink...
CVE-2026-85076
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.124, an authenticated non-admin with runevents, createevents, or editevents privilege can supply undeclared keys in event params through apicreateevent, apiupdateevent, or apirunevent. lib/api.js and...
CVE-2026-59179
A flaw was found in @openhop/server. The application fails to properly validate flow identifiers received in route parameters before constructing file system paths. An unauthenticated attacker can exploit this flaw by sending crafted requests containing relative path sequences to access locations...
CVE-2026-108760
A flaw was found in llamafarm. An insecure default configuration exposes the unauthenticated application programming interface API server on all network interfaces while ignoring host overrides. A network-adjacent attacker can connect directly to the management endpoints to permanently delete...