CVE-2018-10933_ssh

CVE-2018-10933 이 코드를 테스트하려면: 홈페이지에서 취약한 버전의 libssh를 받으세요: https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz 압축을 풀고 빌드한 다음 example 디렉터리로 이동하세요. libssh를 사용하는 간단한 sshd 서버가 있으며 이름은 samplesshd-cb입니다. 다음 명령으로 이 간단한 sshd를 실행하세요: $ samplesshd-cb 127.0.0.1 -p 2222 내 코드를 실행하면 출력은 다음과 같습니다: Allocated...

EUVD-2026-69303

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access...

CVE-2026-79687

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access...

CVE-2026-79687

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability (CVE-2026-79687). An unauthenticated attacker with remote network access could exploit the flaw to obtain filesystem access , with a changed scope and High impact on confidentiality, integrity, and availab...

POC-CVE-2026-18963

CVE-2026-18963 — PoC обхода аутентификации в процессе восстановления пароля Keycloak Proof of Concept для CVE-2026-18963 — уязвимости в процессе «Забыли пароль» / выбора учётных данных в Keycloak, которая позволяет атакующему достичь шага UPDATEPASSWORD и сбросить пароль целевой учётной записи бе...

CVE-2026-84114

A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be executed remotely. The exploit has been...

CVE-2026-74994

The modauth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory blocks into a single shared user/group namespace. A user added to one protected directory is accepted as valid for all...

AZL-98463 CVE-2026-66835 affecting package erlang 26.2.5.21-4

Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthenticated attacker to read files inside a modauth protected directory by prefixing the request path with an extra slash. httpdrequest:validateuri/1 normalises the request URI with uristring:normalize/1, which performs...

CVE-2026-18771

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass. This issue affects Talassoft Industrial Management Software: from V4 before V.16...

CVE-2026-18771 Missing Authentication for Critical Function in TMT Machine's Talassoft Industrial Management Software

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass. This issue affects Talassoft Industrial Management Software: from V4 before V.16...

CVE-2026-18771

TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software is affected by a missing authentication for critical function vulnerability, enabling Authentication Bypass in versions V4 through before V.16 . The CNA (USOM, Turkey) assigned a CVSS 3.1 score of 7.5 (HIGH) with a v...

EUVD-2026-69382

Missing authentication for critical function vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Authentication Bypass. This issue affects Talassoft Industrial Management Software: from V4 before V.16...

EUVD-2026-69240

The modauth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory blocks into a single shared user/group namespace. A user added to one protected directory is accepted as valid for all...

CVE-2026-74994

The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory blocks into a single shared user/group namespace . This means a user authorized for one protected directory is also acc...

CVE-2026-74994 inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth

The modauth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration blocks, collapses all directory blocks into a single shared user/group namespace. A user added to one protected directory is accepted as valid for all...

CVE-2026-84114

Cleo Harmony versions up to 5.8.1.10 contain an improper authentication vulnerability in the SAML Authentication component, specifically in the function LocalUserUtil.getNativeUserByAssertions . Manipulation of the Email argument allows a remote attacker with low privileges to bypass authenticati...

EUVD-2026-69237

A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be executed remotely. The exploit has been...

CVE-2026-84114 Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authentication

A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be executed remotely. The exploit has been...

CVE-2026-55951

The Erlang/OTP httpc HTTP client (inets package) does not enforce a limit on the total size of response headers. The max_header_size option defaults to nolimit, and httpc_response:parse_headers/6 accumulates all headers into a list before the length check fires (only after the terminating CRLF CR...

CVE-2026-8732

CVE-2026-8732 — WP Maps Pro ≤ 6.1.0 ♡ Неаутентифицированное повышение привилегий через создание учётной записи администратора ♡ === shadow ♡ & friska === 📋 Информация об уязвимости Поле| Детали ---|--- CVE ID| CVE-2026-8732 CVSS Score| 9.8 Critical CVSS Vector|...