CVE-2023-37596

CVE-2023-37596 —— issabel-pbx 4.0.0-6：跨站请求伪造（CSRF）—— 删除任意用户 严重性： 高危 | CVSS v3.1： 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | CWE： CWE-352 目录 概述 漏洞详情 影响 受影响版本 攻击场景 概念验证（复现步骤） 缓解 / 修复措施 参考资料 披露时间线 作者 概述 在 Issabel PBX 4.0.0-6 版本 中发现了一个跨站请求伪造（CSRF）漏洞。其用户管理端点未实现任何 CSRF 防护，这使得未认证的远程攻击者能够构造一个恶意网页——当已认证的...

EUVD-2026-75798

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials...

EUVD-2026-76189

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over...

PT-2026-90526

The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local user. This is inconsistent with a separate, stronger hashing...

CVE-2026-79396

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over...

CVE-2025-8730

CVE-2025-8730 – Belkin F9K1009/F9K1010 における認証バイパス 著者: Byte Reaper 説明: このリポジトリには、Belkin F9K1009 および F9K1010 ルーターの Web インターフェースに影響を与える重大な認証バイパスの脆弱性である CVE‑2025‑8730 の エクスプロイトが含まれています。 この欠陥は /login.htm...

CVE-2026-78573

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials...

CVE-2026-78573

IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.7 are vulnerable to administrative takeover due to default credentials (CWE-1392). Three password fields—platform_admin_password, default_user_password, and basic_auth_password—ship with the publicly known value "changeme" . When an operator...

CVE-2026-78573 IBM ContextForge MCP Gateway is affected by use of default credentials

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

CVE-2026-9336

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space...

CVE-2026-9336 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space...

EUVD-2026-75677

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space...

CVE-2026-9336

IBM WebSphere Application Server versions 9.0 and 8.5 (prior to 9.0.5.29 and 8.5.5.31 ) are vulnerable to a denial of service caused by a specially-crafted HTTP request sent to an administrative endpoint. A remote attacker with adjacent network access and no privileges can exhaust filesystem spac...

Cacti 1.2.24 - SQL Injection

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graphview.php. Since guest users can access graphview.php without authentication by default, if guest users are being utilized in an enabled state, there...

Zyxel - Authentication Bypass

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...

CVE-2026-22241

CVE-2026-22241 : Open eClass Ejecución Remota de Código RCE Este exploit utiliza CVE-2026-22241 y automatiza el inicio de sesión, la creación de ZIP, el proceso de carga y proporciona una webshell directamente en el servidor, eliminándola automáticamente una vez que el exploit se completa...

PT-2026-89613

IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials...

CVE-2026-41940

CVE-2026-41940 A recente vulnerabilidade CVE-2026-41940 trouxe grande preocupação para administradores de servidores que utilizam cPanel/WHM. Trata-se de uma falha crítica que pode permitir o bypass de autenticação, possibilitando acesso indevido ao painel administrativo sem credenciais válidas...

CVE-2026-25924

CVE-2026-25924 PoC - Kanboard 管理员 RCE 通过安全控制绕过实现管理员 RCE 的 Proof-of-Concept 披露： 最初由我通过 GHSA-grch-p7vf-vc4f 报告 ⚠️ 仅限授权渗透测试/研究使用。 漏洞信息 字段| 值 ---|--- CVE ID| CVE-2026-25924 严重性| 🔴 高 CVSS 评分| 8.4 CVSS 向量| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CWE| CWE-863：不正确的授权 受影响产品| Kanboard ≤ 1.2.49 已修补版本|...