CVE-2026-114123

The D365 F&O MCP Server is vulnerable to unauthenticated access in versions prior to 1.11.0 due to insecure default configurations in the official Azure one-click deployment. The deployment files (infrastructure/azuredeploy.json and infrastructure/main.bicep) default the apiKey to an empty string...

Microsoft Outlook Express 5/6 Script Execution Weakness

No description provided by source. source: http://www.securityfocus.com/bid/8281/info It has been reported that a weakness may have been re-introduced into Microsoft Outlook Express. According to the source, the issue described in Bugtraq ID 3334 had been fixed by Microsoft but appears to have...

Apache on Mac OS X HFS+ Arbitrary File Source Disclosure

The remote host seems to be running Mac OS X or Mac OS X Server. There is a flaw in the remote web server that allows an attacker to obtain the source code of any given file on the remote web server by reading it through its data fork directly. An attacker may exploit this flaw to obtain the sour...