CVE-2026-84485

APITable versions through 1.13.0-beta.1 expose an internal organization loadOrSearch endpoint without requiring authentication. This allows unauthenticated attackers to retrieve member names, email addresses, and team hierarchy by querying the endpoint with space identifiers obtained from shared ...

CVE-2026-84485 APITable through 1.13.0-beta.1 Missing Authentication on the Internal Organization Load or Search Endpoint

APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. Attackers can query the endpoint with space identifiers obtained from shared links or...

CVE-2026-84485 APITable through 1.13.0-beta.1 Missing Authentication on the Internal Organization Load or Search Endpoint

APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. Attackers can query the endpoint with space identifiers obtained from shared links or...

CVE-2026-84699

Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset local account passwords and authenticate as those users to gain unauthorized access...

CVE-2026-84696

Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write...

CVE-2024-48322

CVE-2024-48322 आपको RunCodes इंस्टेंस में एक खाता होना आवश्यक है, किसी भी विशेषाधिकार के साथ। poetry के साथ इंस्टॉल करें और इंस्टेंस का बेस URL प्रदान करके चलाएँ। root@kitploit: $ python pay.py अपने ईमेल इनबॉक्स में देखें, पासवर्ड वहाँ होना चाहिए।...

EUVD-2026-69790

Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset local account passwords and authenticate as those users to gain unauthorized access...

CVE-2026-84699 Team Password Manager before 14.184.308 Authentication Bypass in Password Reset

Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset local account passwords and authenticate as those users to gain unauthorized access...

CVE-2026-84699

Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow, allowing unauthenticated attackers to reset local account passwords and authenticate as those users, resulting in unauthorized access. The vulnerability is rated CVSS 3.1...

CVE-2026-84696 Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands

Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write...

CVE-2026-84696

Phison PS3111-S11 controller firmware, in versions through SBFQT1.3 , exposes privileged vendor unique commands (VUC) over the ATA interface with absent or defeatable authentication. Attackers with local access can bypass a weak CRC-16 based unlock handshake or target builds lacking a VUC lock en...

CVE-2026-84696 Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands

Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write...

EUVD-2026-69787

Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privileged vendor unique commands over the ATA interface with absent or defeatable authentication mechanisms. Attackers can bypass the weak CRC-16 based unlock handshake or exploit builds with no VUC lock to read and write...

f5-bigip-rce-cve-2020-5902

Outil de détection de la vulnérabilité F5 BIG-IP RCE CVE-2020-5902 Résumé Le 6 juillet 2020, la vulnérabilité RCE TMUI de F5 BIG-IP a été divulguée en ligne. Le composant TMUI interface utilisateur de gestion du trafic de F5 BIG-IP présente une vulnérabilité de contournement de l'authentification...

EUVD-2026-69725

WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php that allows unauthenticated attackers to compute valid HMAC tokens using the public site URL and current time. Attackers can forge authentication tokens by computing hashhmac with the site's...

EUVD-2026-69726

A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go of the component upload-resource API. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the...

EUVD-2023-60613

Proxmox Virtual Environment VE 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured second factor by supplying an arbitrary tfa-challenge value ...

EUVD-2026-69707

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2025-32433

ثغرة تنفيذ التعليمات البرمجية عن بُعد في Erlang/OTP SSH، يعود جذر المشكلة إلى خلل في آلية معالجة رسائل بروتوكول SSH، حيث يمكن للمهاجم إرسال رسائل بروتوكول الاتصال قبل اكتمال المصادقة. ومن الجدير بالذكر أن هذه الثغرة تؤثر على جميع إصدارات Erlang/OTP التي تشغّل مكوّن خادم SSH، بغض النظر عن إصدار...

CVE-2024-45409

Ruby-SAML / GitLab प्रमाणीकरण बाईपास CVE-2024-45409 शोषण यह स्क्रिप्ट CVE-2024-45409 का शोषण करती है, जो IDP द्वारा जारी किसी भी हस्ताक्षरित SAML दस्तावेज़ तक पहुँच रखने वाले अप्रमाणित हमलावर को SAML प्रतिसाद/अभिकथन जाली बनाने और GitLab पर किसी भी उपयोगकर्ता के रूप में पहुँच प्राप्त करने की अनुमत...