104141 matches found
Livewire Request Detected
This is an informational plugin to inform the user that the scanner has detected the usage of the Livewire framework in the target web application. Livewire is a full-stack framework for Laravel that makes building dynamic interfaces simple, without leaving the comfort of Laravel. No source data...
PT-2026-3119
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series and MX Series with MX-SPC3 or MS-MPC versions prior to 21.2R3-S10 Juniper Networks Junos OS on SRX Series and MX Series with MX-SPC3 or MS-MPC versions 21.4 through 21.4R3-S12 Juniper Networks Junos OS o...
PT-2026-3185
Name of the Vulnerable Software and Affected Versions Nsauditor version 3.2.3 Description Nsauditor 3.2.3 contains a denial of service issue in the registration code input field. An attacker can crash the application by pasting a large buffer of 256 repeated characters into the Key field. This...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003377)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003377 advisory. fs/f2fs/extentcache.c in the Linux kernel before 4.13 mishandles extent trees, which allows local users to cause a denial of service BUG via an application with...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001875)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001875 advisory. The pingrecvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002592)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002592 advisory. kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002116)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002116 advisory. The scosockbind function in net/bluetooth/sco.c in the Linux kernel before 4.3.4 does not verify an address length, which allows local users to obtain sensitive...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002065)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002065 advisory. The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass...
CVE-2026-21288
Illustrator versions 29.8.3, 30.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user...
CVE-2026-23477 Rocket.Chat Unauthorized Access to OAuth App Details
Rocket.Chat is an open-source, secure, fully customizable communications platform. In Rocket.Chat versions up to 6.12.0, the API endpoint GET /api/v1/oauth-apps.get is exposed to any authenticated user, regardless of their role or permissions. This endpoint returns an OAuth application, as long a...
EUVD-2026-2667
Rocket.Chat is an open-source, secure, fully customizable communications platform. In Rocket.Chat versions up to 6.12.0, the API endpoint GET /api/v1/oauth-apps.get is exposed to any authenticated user, regardless of their role or permissions. This endpoint returns an OAuth application, as long a...
EUVD-2026-2016
Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. This vulnerability is fixed in 0.1.5...
CVE-2026-22240 Plaintext Passwords Vulnerability in BLUVOYIX
The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposure via unauthenticated APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable users API to retrieve the...
CVE-2025-14317 User Enumeration in Crazy Bubble Tea mobile application
In Crazy Bubble Tea mobile application authenticated attacker can obtain personal information about other users by enumerating a loyaltyGuestId parameter. Server does not verify the permissions required to obtain the data. This issue was fixed in version 915 Android and 7.4.1 iOS...
CVE-2025-14317
CVE-2025-14317 – Crazy Bubble Tea mobile app : An authenticated attacker can obtain personal information of other users by enumerating a loyaltyGuestId parameter. The server does not verify required permissions to access data. This has been fixed in Android version 915 and iOS version 7.4.1. Affe...
CVE-2026-0812 LinkedIn SC <= 1.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Page
The LinkedIn SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'linkedinscdateformat', 'linkedinscapikey', and 'linkedinscsecretkey' parameters in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible...
CVE-2025-12052
CVE-2025-12052 is described across multiple sources as a local-buffer-overflow vulnerability stemming from drivers in tool packages reading registry values using RTL_QUERY_REGISTRY_DIRECT. Affected component is the driver (egwindrv.sys) or related kernel/tool drivers, with the untrusted applicati...
CVE-2026-0506
Due to a Missing Authorization Check vulnerability in Application Server ABAP and ABAP Platform, an authenticated attacker could misuse an RFC function to execute form routines FORMs in the ABAP system. Successful exploitation could allow the attacker to write or modify data accessible via FORMs...
CVE-2025-12050
CVE-2025-12050 affects drivers in tool packages that read a registry value using RTL_QUERY_REGISTRY_DIRECT, potentially allowing a local untrusted user to cause a buffer overflow. Red Hat, NVD, NVD-derived listings and CNNVD cite the same description, with impact described as high confidentiality...