CVE-2026-60206

🚨 CVE-2026-60206 — Prise de contrôle SAML de WebLogic Vulnérabilité d'authentification SAML d'Oracle WebLogic Server...

Improper Authentication

calibreweb is vulnerable to Improper Authentication. The vulnerability exists in the login function of web.py file, which allows a remote attacker to takeover the account by bruteforcing due to improper restriction of excessive authentication attempts...

CVE-2018-8925

Cross-site request forgery CSRF vulnerability in admin/user.php in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote attackers to hijack the authentication of administrators via the 1 username, 2 password, 3 admin, 4 action, 5 uid, or 6 modifyadmin parameter...

Redaxo CMS Cross-Site Scripting Vulnerability

Redaxo CMS is an open source Web portal content management system CMS. The system supports custom modules , plug-in extensions , project backup and so on. A cross-site scripting vulnerability exists in Redaxo CMS. The vulnerability allows attackers to steal cookie-based authentication, take contr...