CVE-2023-2732

CVE-2023-2732 Mstore WordPress APIs Vulnerable Scanner est un outil puissant et convivial conçu pour identifier les vulnérabilités potentielles des sites WordPress en inspectant leurs points de terminaison API. Ce scanner vise à aider les propriétaires de sites, développeurs et professionnels de ...

EUVD-2026-91832

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints...

CVE-2026-105046

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints...

CVE-2026-105046

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints...

CVE-2026-41473-CyberPanel-AI-Scanner-Unauth

CVE-2026-41473 — Неаутентифицированный доступ к API чтения/записи AI Scanner в CyberPanel Nuclei-шаблон для обнаружения CVE-2026-41473, затрагивающей CyberPanel версий до 2.4.4. Уязвимость Функция AI Scanner в CyberPanel предоставляет две конечные точки API без аутентификации: Конечная точка|...

halo-cors-csrf-CVE-2026-67921

CVE-2026-67921: Неправильная конфигурация CORS в Halo CMS в сочетании с обходом защиты CSRF Краткое описание Критическая комбинированная уязвимость существует в версиях Halo CMS до 2.25.4 из-за двух ошибок в конфигурации безопасности: 1. Неправильная конфигурация CORS : Политика CORS разрешает...

CVE-2026-35616-detector.py

CVE-2026-35616 - Детектор уязвимости FortiClient EMS Описание Этот инструмент определяет, уязвим ли сервер FortiClient EMS к CVE-2026-35616 — критической уязвимости, связанной с некорректным контролем доступа, затрагивающей версии 7.4.5–7.4.6. Оценка CVSS: 9.1 критическая CWE: CWE-284 некорректны...

CVE-2026-67172

HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to certain API endpoints . This information could enable an attacker to facilitate further attacks...

CVE-2026-35616

CVE-2026-35616 — Обход аутентификации FortiClient EMS Proof of Concept PoC для обхода аутентификации FortiClient Endpoint Management Server CVE-2026-35616 Этот скрипт эксплуатирует уязвимость обхода аутентификации в FortiClient EMS, которая позволяет неавторизованный доступ к защищённым...

CVE-2026-67172

HCL BigFix Service Management is affected by an Information Disclosure vulnerability. The application returns sensitive information within error messages when invalid inputs are submitted to specific API endpoints . This exposure could potentially be used by an attacker to facilitate subsequent a...

CVE-2026-67172 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to certain API endpoints . This information could enable an attacker to facilitate further attacks...

CVE-2026-67172 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to certain API endpoints . This information could enable an attacker to facilitate further attacks...

EUVD-2026-90904

HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to certain API endpoints . This information could enable an attacker to facilitate further attacks...

CVE-2026-67106

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks...

CVE-2026-67104

HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endpoints for further targeted exploitation...

CVE-2026-67106 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks...

CVE-2026-67106

HCL BigFix Service Management is affected by an Information Disclosure vulnerability. The issue stems from two exposed API endpoints that return sensitive data, which could facilitate more serious attacks. The provided documents do not specify the exact versions affected, the specific data leaked...

EUVD-2026-90879

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks...

CVE-2026-67104 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endpoints for further targeted exploitation...

EUVD-2026-90877

HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endpoints for further targeted exploitation...