4308 matches found
CVE-2026-23813
CVE-2026-23813 — Omisión de Autenticación Pre-Auth en AOS-CX Atacantes remotos no autenticados pueden alcanzar la API REST de gestión de AOS-CX contrabandeando un token login a través de la expresión regular demasiado permisiva de nginx sobre versiones, exponiendo la superficie de configuración...
Aruba Airwave <8.2.3.1 - Cross-Site Scripting
Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting. id: CVE-2016-8527 info: name: Aruba Airwave 8.2.3.1 - Cross-Site Scripting author: pikpikcu severity: medium description: Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting...
Aruba Instant Access Point (IAP) - Cross-Site Scripting
A remote cross-site scripting xss vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below;...
bugstropics
Cazando bugs en los trópicos Este es un repositorio con las diapositivas utilizadas en mi presentación «Hunting Bugs in the Tropics» en DEFCON30. Incluye el script de Python utilizado para calcular la contraseña de soporte basándose en la clave privada obtenida al romper la clave pública EC del...
CVE-2026-97258
Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...
EUVD-2026-90857
Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...
CVE-2026-97258 WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability
Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...
CVE-2026-97258
The WordPress Aruba Migration Tool plugin (versions
WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Aruba Migration Tool versions = 1.0.4...
PT-2026-103887
Name of the Vulnerable Software and Affected Versions Aruba Migration Tool versions prior to 1.0.5 Description Broken access control allows subscribers to bypass intended security restrictions. Recommendations Update Aruba Migration Tool to version 1.0.5 or later...
zero-touch-containment
zero-touch-containment Antigena Darktrace → Aruba ClearPass CoA 桥接器 — 基于模型驱动的实时用户/设备隔离。零 SOC 点击即可实现从检测到遏制。 这是一个经过清理的生产级 NDR↔NAC 集成模式的参考实现，已在金融行业规模（数千端点，24/7 SOC）中运行。客户特定部分已替换为合成夹具；架构、决策流程和运营模式均为真实版本。 为什么存在 NDR（Darktrace、ExtraHop、Vectra）的承诺是数秒内检测。但在大多数银行中的现实：检测只需数秒，遏制却需要数小时 ——因为 SOC 与...
CVE-2026-15889
The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Content in all versions up to, and including, 3.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2026-15889
The Aruba HiSpeed Cache WordPress plugin is affected by a Stored Cross-Site Scripting (XSS) vulnerability in all versions up to and including 3.0.14 , caused by insufficient input sanitization and output escaping in the Post Content field. An authenticated attacker with Contributor-level access o...
CVE-2026-15889 Aruba HiSpeed Cache <= 3.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Content in all versions up to, and including, 3.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...
EUVD-2026-75366
The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Content in all versions up to, and including, 3.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2026-15889 Aruba HiSpeed Cache <= 3.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Content in all versions up to, and including, 3.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2026-15889: Improper Neutralization of Input During Web Page Generation
The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Content in all versions up to, and including, 3.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...
PT-2026-89337
The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Content in all versions up to, and including, 3.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...
WordPress Aruba HiSpeed Cache plugin <= 3.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Aruba HiSpeed Cache versions = 3.0.14...
