55 matches found
CVE-2026-11731 Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models
An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the...
PT-2026-111626
Name of the Vulnerable Software and Affected Versions NETGEAR RAX series affected versions not specified Description An authentication bypass allows an unauthenticated attacker with adjacent access to the management service to access device information or modify administrative settings. This issu...
GHSA-CVPC-HCCG-WMW4 Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration
Formie contains a missing authorization vulnerability in administrative settings routes. An authenticated, non-admin Craft CMS control panel user with limited Formie access could directly access Formie settings pages and modify global plugin configuration. In affected versions, Formie...
CVE-2025-27851
The locally served web site on the Garmin WDU v1 1.4.6 and v2 5.0 allows a cross-site origin WebSocket hijacking attack. Among other uses, the WDU utilizes WebSockets to control settings, including administrative settings. This allows a network attacker to take full control of a WDU. To initiate ...
EUVD-2025-209829
The locally served web site on the Garmin WDU v1 1.4.6 and v2 5.0 allows a cross-site origin WebSocket hijacking attack. Among other uses, the WDU utilizes WebSockets to control settings, including administrative settings. This allows a network attacker to take full control of a WDU. To initiate ...
CVE-2025-27851
The locally served web site on the Garmin WDU v1 1.4.6 and v2 5.0 allows a cross-site origin WebSocket hijacking attack. Among other uses, the WDU utilizes WebSockets to control settings, including administrative settings. This allows a network attacker to take full control of a WDU. To initiate ...
CVE-2025-27851
The Garmin WDU (versions v1 1.4.6 and v2 5.0 ) is vulnerable to a cross-site origin WebSocket hijacking attack via its locally served website. The device uses WebSockets to manage administrative configurations; an attacker can exploit this to gain full control of the WDU. Exploitation requires th...
PT-2026-40796
Name of the Vulnerable Software and Affected Versions Garmin WDU version 1.4.6 Garmin WDU version 5.0 Description The locally served web site allows a cross-site origin WebSocket hijacking attack. The system utilizes WebSockets to manage settings, including administrative configurations, which...
CVE-2026-1044
CVE-2026-1044 concerns the WordPress plugin Tennis Court Bookings (
CVE-2025-62716 Plane Vulnerable to Cross-Site Scripting via Open Redirect in ?next_path Parameter
Plane is open-source project management software. Prior to version 1.1.0, an open redirect vulnerability in the ?nextpath query parameter allows attackers to supply arbitrary schemes e.g., javascript: that are passed directly to router.push. This results in a cross-site scripting XSS vulnerabilit...
EUVD-2018-7483
Malware in sbrugna...
EUVD-2008-1341
Malware in sbrugna...
EUVD-2009-4789
Malware in sbrugna...
EUVD-2013-5029
Malware in sbrugna...
EUVD-2018-8533
Malware in sbrugna...
EUVD-2012-1199
Malware in sbrugna...
EUVD-2022-31835
Malicious code in bioql PyPI...
PT-2025-35817
Name of the Vulnerable Software and Affected Versions: Ruijie RG-ES series switch firmware version ESW 1.01B1P39 Description: A vulnerability in the Ruijie RG-ES series switch firmware enables remote attackers to bypass authentication mechanisms, granting them unrestricted access to modify...
CVE-2025-50986: Improper Neutralization of Input During Web Page Generation
diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting XSS vulnerabilities in its administrative settings interface. Various configuration fields such as ESHOST, ESINDEXREFRESH, ESPORT, ESSCROLLSIZE, ESTRANSLOGSIZE, ESTRANSLOGSYNCINT, EXCLUDESFILES, FILETYPES,...