135534 matches found
EUVD-2026-90575
MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...
EUVD-2026-90550
MISP contains a vulnerability in its two-factor authentication TOTP verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor...
CVE-2026-103655 MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period
MISP contains a vulnerability in its two-factor authentication TOTP verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor...
CVE-2026-103655
The MISP platform (versions
CVE-2021-44270
CVE-2021-44270 Anviz-Access-Control-Authentication-Bypass https://nvd.nist.gov/vuln/detail/CVE-2021-44270...
CVE-2023-23752-EXPLOIT
CVE-2023-23752 - Joomla: Verificación de Acceso Incorrecta Se ha identificado un problema en las versiones 4.0.0 a 4.2.7 de Joomla. Esta vulnerabilidad está relacionada con una verificación de acceso incorrecta dentro de la aplicación, lo que permite el acceso no autorizado a endpoints críticos d...
CVE-2026-80275
The Comelit Multi-User Gateway for VIP System (model 1456B) is vulnerable in firmware versions 2.9.1 and 2.10.0 due to a failure to enforce server-side authorization on an administrative password-change function. This flaw allows an authenticated user level to invoke the function and overwrite th...
CVE-2018-10933
CVE-2018-10933 - SSH 认证绕过 PoC 描述 CVE-2018-10933 是 libssh 服务端实现中的一个认证绕过漏洞。该漏洞允许攻击者在没有任何先前认证的情况下发送 SSH2MSGUSERAUTHSUCCESS 消息，从而获得未经授权的访问权限。 受影响系统 任何使用存在漏洞版本的 libssh 提供 SSH 服务的服务器均受影响。 受影响版本 libssh 0.6 及以上版本 修复版本：0.7.6 和 0.8.4 使用方法 1. 将脚本中的 ip 替换为目标 IP 地址。 2. 运行脚本： pip install paramiko python3...
CVE-2026-82829
Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accounts or hard coded credentials. This issue affects Hitachi Coding Software Suite: through 3.3.0...
CVE-2026-82825
Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API, potentially leading to unauthorized retrieval or alteration of sensitive information, or unauthorized manipulation. Thi...
CVE-2026-12241
The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly secure capability check on the 'savemetaboxes' function in all versions up to, and including, 2.51. This makes it possible for authenticat...
CVE-2026-82825
The Hitachi Coding Software Suite (versions through 3.3.0) is vulnerable to a Missing Authentication for Critical Function flaw. This vulnerability allows an unauthenticated attacker to invoke a critical API, which may lead to the unauthorized retrieval or alteration of sensitive information, or ...
EUVD-2026-90494
Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API, potentially leading to unauthorized retrieval or alteration of sensitive information, or unauthorized manipulation. Thi...
CVE-2026-82825 Missing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed
Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API, potentially leading to unauthorized retrieval or alteration of sensitive information, or unauthorized manipulation. Thi...
CVE-2026-82829 Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process
Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accounts or hard coded credentials. This issue affects Hitachi Coding Software Suite: through 3.3.0...
CVE-2026-82829
The Hitachi Coding Software Suite (affected versions through 3.3.0 ) contains a Hidden Functionality vulnerability. An attacker can exploit hidden accounts or hard-coded credentials to gain unauthorized access without undergoing the legitimate authentication process. The impact is categorized as ...
EUVD-2026-90490
Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accounts or hard coded credentials. This issue affects Hitachi Coding Software Suite: through 3.3.0...
CVE-2026-82829 Hidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process
Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accounts or hard coded credentials. This issue affects Hitachi Coding Software Suite: through 3.3.0...
NextJS-Exploit-
NextSploit：Next.js CVE-2025-29927 扫描与利用工具 NextSploit 是一款命令行工具，专门用于检测和利用 CVE-2025-29927 ，这是 Next.js 中的一个安全漏洞。该工具首先识别目标网站是否运行 Next.js，并判断其版本是否在易受攻击范围内。如果确认网站存在漏洞，工具将自动尝试利用该问题 ，通过绕过中间件保护，可能获得对受限页面的未授权访问。 功能特性 自动 Next.js 版本检测 ：使用 Wappalyzer 检查目标网站是否运行 Next.js，并获取其版本。 漏洞评估 ：判断检测到的版本是否位于已知的易受攻击范围内。...
EUVD-2026-90478
The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly secure capability check on the 'savemetaboxes' function in all versions up to, and including, 2.51. This makes it possible for authenticat...