60299 matches found
EUVD-2026-70901
The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to read the posts it returns, allowing unauthenticated attackers to obtain the title and content of non-public posts, such as draft, pending, private and scheduled posts, when a view has...
CVE-2026-85149
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...
EUVD-2026-70871
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...
CVE-2026-85149
Lightstar SmartIT Desktop Manager is affected by a Use of Hard-coded Credentials vulnerability. The SFTP service credentials for the SmartIT Agent application are embedded in the source code, allowing unauthenticated remote attackers to extract them and gain access to browse the file system of th...
EUVD-2026-70870
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts...
CVE-2026-85148
Lightstar SmartIT Desktop Manager contains a Use of Hard-coded Credentials vulnerability. An unauthenticated remote attacker can exploit a fixed password to gain remote access to user hosts managed by the application. The vulnerability is rated CRITICAL with a CVSS v3.1 score of 9.8 (AV:N/AC:L/PR...
EUVD-2026-70869
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication...
EUVD-2026-70849
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.8, from 9.0.0 before 9.0.8, all other EOL versions from 4.5.0. The vulnerability allows an unauthenticated user to get WHMCS customer's data via 2Checkout payment gateway's endpoi...
EUVD-2026-70816
MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect with arbitrary client names to execute privileg...
CVE-2026-67398
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.7, from 9.0.0 before 9.0.8, all other EOL versions from 4.5.0. The vulnerability allows an unauthenticated user to get WHMCS customer's data via 2Checkout payment gateway's endpoi...
PT-2026-85556
Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr without allowlist validation. Unauthenticated attackers can register clients, instantiate Repo resources, and invoke arbitrary methods to read experiments or delete runs...
EUVD-2026-71453
PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...
PT-2026-85464
Name of the Vulnerable Software and Affected Versions AI Website Builder WordPress plugin GitHub build version 1.0.0 Description Lack of authorization and nonce checks on REST API routes allows unauthenticated attackers to perform several unauthorized actions. These include installing and...
CVE-2026-75430
PowerJob Worker version 5.1.2 and likely earlier versions exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-71197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - glance - None Ubuntu Linux - Unknown description CVE-2026-71197 Note that Nessus relies on the presence of the package as reported by the vendor...
CVE-2026-67398
CVE-2026-67398 is a missing authorization flaw in the 2Checkout payment gateway integration of WHMCS . An unauthenticated attacker can enumerate invoice IDs and retrieve customer personal data through the 2Checkout endpoint under specific conditions. Affected versions include all WHMCS 4.5.0+ (EO...
CVE-2026-67398
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.7, from 9.0.0 before 9.0.8, all other EOL versions from 4.5.0. The vulnerability allows an unauthenticated user to get WHMCS customer's data via 2Checkout payment gateway's endpoi...
CVE-2026-67398
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.7, from 9.0.0 before 9.0.8, all other EOL versions from 4.5.0. The vulnerability allows an unauthenticated user to get WHMCS customer's data via 2Checkout payment gateway's endpoi...
CVE-2026-85424
MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect with arbitrary client names to execute privileg...