CVE-2026-108783

A security vulnerability exists in PRVTPRO Amnezia-Web-Panel versions up to 1.6.2/1.7.2 . The flaw is located within the Backup Download component, specifically affecting an unspecified part of the app.py file. This issue allows for the use of default credentials , which can be exploited via a re...

EUVD-2026-97137

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed...

PT-2026-110410

Name of the Vulnerable Software and Affected Versions PRVTPRO Amnezia-Web-Panel versions prior to 1.6.3 PRVTPRO Amnezia-Web-Panel versions prior to 1.7.3 Description A remote attack is possible in the Backup Download component within the app.py file. This issue allows the use of default credentia...

CVE-2026-108783: Use of Default Credentials

A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2026-57517-CWP

CVE-2026-57517 CWP Exploit This repository contains a Go-based proof-of-concept tool for testing a known Control Web Panel CWP vulnerability scenario related to CVE-2026-57517. The implementation targets a blind SQL injection path and includes optional webshell deployment and command execution fl...

cumulus

Software di monitoraggio delle vulnerabilità delle applicazioni Cos'è Cumulus Cumulus è un servizio che ti aiuta a monitorare e risolvere le vulnerabilità di sicurezza in tempo reale. I problemi vengono segnalati su una dashboard web. È molto semplice e potente. Caratteristiche principali Basta...

EUVD-2026-86623

Stored Cross-Site Scripting XSS vulnerability in StockAgile API and management panel. The vulnerability is present on the server side in REST endpoint '/inventory/configuration/serial-number-types' that allow the injection and persistence of malicious JavaScript code through parameters such as...

CVE-2026-19205

Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026...

CVE-2026-19205 User Enumeration in GastroMenum's GastroMenum Web Panel

Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026...

CVE-2026-19205 User Enumeration in GastroMenum's GastroMenum Web Panel

Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026...

CVE-2026-19205

CVE-2026-19205 is a user enumeration vulnerability in the GastroMenum Web Panel , caused by an observable response discrepancy that allows account footprinting . The vulnerability is exploitable over the network with low complexity and no privileges required, yielding a CVSS 3.1 score of 7.5 (HIG...

EUVD-2026-71214

Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026...

PT-2026-85532

Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026...

CVE-2026-19205: Observable Response Discrepancy

Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. This issue affects GastroMenum Web Panel: before 31.08.2026...

CVE-2026-16323

FuyaWeb's ArchitectPanel Web Admin Panel suffers an Execution After Redirect (EAR) flaw allowing unauthenticated remote attackers to bypass authentication and read confidential data (CVSS 7.5 HIGH). Affected through 28072026; no patch version or exploitation evidence provided in the documents.

CVE-2026-71274 OpenBK7231T Stored XSS via Unsanitized MQTT-Set Channel Labels

OpenBK7231T's CHANNELSetLabel src/cmnds/cmdchannels.c stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization. CHANNELGetLabel returns these labels unsanitized, and they are rendered via hprintf255 at 15+ locations in src/httpserver/httpfns.c wit...

CVE-2026-71274 OpenBK7231T Stored XSS via Unsanitized MQTT-Set Channel Labels

OpenBK7231T's CHANNELSetLabel src/cmnds/cmdchannels.c stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization. CHANNELGetLabel returns these labels unsanitized, and they are rendered via hprintf255 at 15+ locations in src/httpserver/httpfns.c wit...

EUVD-2026-53359

OpenBK7231T's CHANNELSetLabel src/cmnds/cmdchannels.c stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization. CHANNELGetLabel returns these labels unsanitized, and they are rendered via hprintf255 at 15+ locations in src/httpserver/httpfns.c wit...

CVE-2026-71274

OpenBK7231T is affected by CVE-2026-71274 due to CHANNEL_SetLabel() storing labels from MQTT SetChannelLabel without HTML sanitization, and CHANNEL_GetLabel() returning unsanitized values. These labels are rendered via hprintf255() in the web panel at 15+ locations with no HTML encoding, enabling...

PT-2026-68147

Name of the Vulnerable Software and Affected Versions OpenBK7231T affected versions not specified Description The software fails to sanitize channel labels received via the MQTT SetChannelLabel command in the CHANNEL SetLabel function src/cmnds/cmd channels.c. These labels are stored using strdup...