CVE-2026-62290 cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace...

Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled

Description Overview When LDAP TLS is enabled LDAPUSETLS = True, Lemur's LDAP authentication module unconditionally disables TLS certificate verification at the global ldap module level. This allows a man-in-the-middle attacker positioned between Lemur and the LDAP server to intercept all...

PT-2026-38301

Name of the Vulnerable Software and Affected Versions Lemur versions prior to 1.9.0 Description When LDAP TLS is enabled via the LDAP USE TLS variable, the LDAP authentication module in the bind function unconditionally disables TLS certificate verification at the global ldap module level. This...

CVE-2026-30836

A flaw was found in Step CA, an online certificate authority. A remote attacker can exploit this vulnerability by sending an unauthenticated SCEP Simple Certificate Enrollment Protocol Update Request. This allows the attacker to issue unauthorized certificates, potentially leading to a compromise...

CVE-2022-42067

Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference IDOR vulnerability...

EUVD-2000-1062

Malware in sbrugna...

EUVD-2014-3089

Malware in sbrugna...

CVE-2022-42069

Online Birth Certificate Management System version 1.0 suffers from a persistent Cross Site Scripting XSS vulnerability...

CVE-2022-42071

Online Birth Certificate Management System version 1.0 suffers from a Cross Site Scripting XSS Vulnerability...

CVE-2022-42070

Online Birth Certificate Management System version 1.0 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2024-5045: Files or Directories Accessible to External Parties

A vulnerability was found in SourceCodester Online Birth Certificate Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin. The manipulation leads to files or directories accessible. The attack can be initiated remotely. The exploit...

PT-2022-26233 · Unknown · Online Birth Certificate Management System

Name of the Vulnerable Software and Affected Versions: Online Birth Certificate Management System version 1.0 Description: The issue concerns a Cross Site Request Forgery CSRF problem. This means an attacker could potentially trick a user into performing unintended actions on the system...

CVE-2022-42070: Cross-Site Request Forgery (CSRF)

Online Birth Certificate Management System version 1.0 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2022-42069

CVE-2022-42069 affects Online Birth Certificate Management System version 1.0. The Connected documents corroborate a persistent Cross-Site Scripting (XSS) vulnerability in this software, including references noting stored XSS and the vulnerable version. The available data do not specify root caus...

PT-2022-26231 · Unknown · Online Birth Certificate Management System

Name of the Vulnerable Software and Affected Versions: Online Birth Certificate Management System version 1.0 Description: The issue is related to a persistent Cross Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the system, which will be executed ...

CVE-2022-42071: Improper Neutralization of Input During Web Page Generation

Online Birth Certificate Management System version 1.0 suffers from a Cross Site Scripting XSS Vulnerability...

CVE-2022-42067: Authorization Bypass Through User-Controlled Key

Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference IDOR vulnerability...

CVE-2022-42067

CVE-2022-42067 concerns an Insecure Direct Object Reference (IDOR) vulnerability in the Online Birth Certificate Management System version 1.0. The available documents identify the affected product and vulnerability class but do not provide deeper root-cause details, exploit vectors, or explicit ...

CVE-2022-42069

Online Birth Certificate Management System version 1.0 suffers from a persistent Cross Site Scripting XSS vulnerability...

CVE-2022-42070

Online Birth Certificate Management System version 1.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability. The root cause is CSRF protection insufficiency that could allow an attacker to perform unintended actions in an authenticated user context. The case is discussed across multip...