commvault-cve2025-34028-check

infra-monitor infra-monitor é um script Nmap NSE leve para testar silenciosamente a consistência de respostas em rotas de infraestrutura web. Ajuda a detectar anomalias em controle de acesso, discrepâncias de configuração ou possíveis inconsistências na forma como diferentes endpoints respondem...

CVE-2020-11539

CVE-2020-11539: Controllo di accesso improprio in Tata Sonata Smartband Informazioni Descrizione: È stato identificato che il smart band non ha pairing modalità 0 livello di sicurezza BLE. I dati trasmessi via etere non sono crittografati. Inoltre, i dati inviati al smart band non hanno alcuna...

CVE-2023-25690

CVE-2023-25690 Beschreibung von CVE-2023-25690: Einige modproxy-Konfigurationen auf dem Apache HTTP Server von Version 2.4.0 bis 2.4.55 ermöglichen HTTP-Request-Smuggling-Angriffe eine Angriffstechnik, die in den Prozess eingreift, mit dem eine Website die von einem oder mehreren Benutzern...

EUVD-2026-67277

Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability...

EUVD-2026-67296

Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances SV-100E and SV-300E series and Synergis Softwire installed on Windows servers...

CVE-2026-76943

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...

CVE-2026-75813

Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access or modify sensitive device settings. This could result in full compromise of device functionality...

CVE-2026-68929

FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...

CVE-2026-44629

Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances SV-100E and SV-300E series and Synergis Softwire installed on Windows servers...

CVE-2020-9332

CVE-2020-9332 Beschreibung Ein anfälliger Bustreiber in FabulaTech „USB for Remote Desktop“ und „USB over Network“ ermöglicht es Benutzern mit niedrigen Berechtigungen, ein vollständig kontrolliertes Software-USB-Gerät hinzuzufügen, das von einem Angreifer verwendet werden kann, um unter bestimmt...

CVE-2026-51658

Incorrect access control in the getDmzCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DMZ configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51652

CVE-2026-51652 is an incorrect access control flaw in the getUPnPCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015 ). An unauthenticated attacker on the adjacent network can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve UPnP enablement status and parsed port...

CVE-2026-51663

TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) is affected by an incorrect access control flaw in the getWiFiApcliScan function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to trigger wireless scans and retrieve AP-client scan results , exposing client inform...

CVE-2026-51646

Incorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain parental-control rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51610

CVE-2026-51610 is an incorrect access control flaw in the RebootSystem function of the TOTOLINK T6 wireless router, firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker on the adjacent network can send a crafted POST request to /cgi-bin/cstecgi.cgi to force an immediate device reb...

CVE-2026-51614

An incorrect access control flaw in the getAccessDeviceCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) allows an unauthenticated attacker on the adjacent network to disclose access-device policy and client state information by sending a crafted POST request to /cgi-bin/cst...

CVE-2026-51632

TOTOLINK T6 (firmware 4.1.5cu.748_B20211015 ) contains an incorrect access control flaw in the getWiFiAdvancedCfg function. An unauthenticated attacker within the adjacent network can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve advanced wireless settings. The CVSS 3.1 score is...

CVE-2026-51640

CVE-2026-51640 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An incorrect access control flaw in the getMeshNeighborTable function allows an unauthenticated attacker on the adjacent network to obtain mesh neighbor information by sending a crafted POST request to /cgi-bin...

CVE-2026-51651

TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) contains an incorrect access control flaw in the getSmartQosCfg function, accessible via a crafted POST request to /cgi-bin/cstecgi.cgi. An unauthenticated attacker on an adjacent network can retrieve Smart QoS configuration and rules, resulting in a l...

CVE-2026-51653

CVE-2026-51653 is an incorrect access control flaw in the getStorageCfg function of the TOTOLINK T6 router running firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker on the adjacent network can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain storage feature state i...