15841 matches found
PT-2026-66450
The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...
PT-2026-66449
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the datastore upload function...
PT-2026-66447
The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...
PT-2026-66445
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the assets function...
CVE-2026-18362: Allocation of Resources Without Limits or Throttling
The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...
CVE-2026-16970: Insufficient Session Expiration
The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...
PT-2026-66510
Name of the Vulnerable Software and Affected Versions Apache Superset versions prior to 6.0.0 Description A Regular Expression Denial of Service ReDoS occurs in the sql parse.py component due to the SQL REGEX used for parsing SQL statements in the sqlparse library integration. The regular...
bunkerweb v1.6.14-rc2
๐ Website | ๐ค Panel | ๐ Documentation | ๐จโ๐ป Demo | ๐ฑ Demo UI | ๐งฉ Templates | ๐ก๏ธ Examples ๐ฌ Chat | ๐ Forum | ๐ Community | ๐บ๏ธ Threatmap | ๐ Status | ๐ Feedback ๐ก๏ธ Make security by default great again! BunkerWeb BunkerWeb is a next-generation, open-source Web Application Firewall WAF. Being a...
CVE-2026-41939
Summary: CVE-2026-41939 affects Care Everywhere Gateway 14.3.10, where a hard-coded credential flaw in the bundled WildFly 8.2.0.Final management interface enables unauthenticated remote access to the WildFly admin console (port 20990) with default credentials. This allows deployment of a malicio...
CVE-2026-56407
An integer overflow exists in libexpat's doProlog function due to improper handling of entity value lengths. A local attacker could exploit this to execute arbitrary code or access sensitive system data. Mitigation To prevent exploitation explicitly disable all internal and external XML entity...
Google Australia Customers Now Benefit From Imperva Cloud-Native WAAP Security
Many Australian businesses have moved their applications and data to cloud-native architectures for agility, scalability, and sovereignty. However, this move extends their attack surface beyond their typical security boundaries. As evidenced by the Thales 2026 Data Threat Report, attackers...
CVE-2025-67405
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatepassword.php via the parameter newpassword...
CVE-2025-67408
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /saveuser.php via the parameter status...
so-crates v3.0.0
SO-CRATES Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus A standalone web application for analyzing pcap files, log files, and binary files. Features include Suricata network analysis, YARA binary scanning, Sigma rule detection for logs, and a single-page UI for browsing...
CVE-2026-66299
Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web...
CVE-2026-66299 Apache Tomcat: DoS via WebSocket chat example
Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web...
SafeLine v9.3.11
SafeLine - Make your web apps secure ๐ Website | ๐ Docs | ๐ Live Demo | ๐โโ๏ธ Discord | ไธญๆ็ ๐ INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...
CVE-2026-59688
The CVE-2026-59688 entry describes an OS Command Injection in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF. An authenticated user with high privileges can execute arbitrary OS commands on the affected appliance via the backup restore functi...
