fortigate-cve-2022-40684-tool

Description This tool allows security professionals to identify and validate exposure to CVE-2022-40684 in FortiGate devices by interacting with exposed CMDB API endpoints. It supports enumeration of administrative users, user groups, and selective configuration extraction for analysis in...

CVE-2023-46003

CVE-2023-46003 Stored XSS in i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to Stored XSS vulnerability. These could allows remote authenticated attackers low or high privilege to stores dangerous data xss payload or fake html page in a database, it will be trigger the xss payload...

CVE-2026-1339

An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link. Affected systems: This issue...

CVE-2026-1339 Open redirect vulnerability - UCMDB/Operations Bridge Manager

An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link. Affected systems: This issue...

EUVD-2026-117736

An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link. Affected systems: This issue...

CVE-2026-1339

An Open Redirect vulnerability exists in the ucmdb-browser component of OpenText™ Universal Discovery and CMDB and Operations Bridge Manager . The issue is limited to classic deployment options ; containerized deployments are not affected. Exploitation requires a user to follow a specially crafte...

CVE-2026-119648

Tencent BlueKing CMDB bk-cmdb through 3.14.6 contains a missing authorization vulnerability that allows authenticated users to view hosts of other businesses via POST /api/v3/hosts/search/asstdetail. Attackers can submit host search conditions targeting other businesses or omitting business filte...

CVE-2026-119648 BlueKing CMDB through 3.14.6 Missing Authorization via /api/v3/hosts/search/asstdetail

Tencent BlueKing CMDB bk-cmdb through 3.14.6 contains a missing authorization vulnerability that allows authenticated users to view hosts of other businesses via POST /api/v3/hosts/search/asstdetail. Attackers can submit host search conditions targeting other businesses or omitting business filte...

CVE-2026-119648 BlueKing CMDB through 3.14.6 Missing Authorization via /api/v3/hosts/search/asstdetail

Tencent BlueKing CMDB bk-cmdb through 3.14.6 contains a missing authorization vulnerability that allows authenticated users to view hosts of other businesses via POST /api/v3/hosts/search/asstdetail. Attackers can submit host search conditions targeting other businesses or omitting business filte...

CVE-2026-119648

Tencent BlueKing CMDB (bk-cmdb) versions through 3.14.6 are vulnerable to a missing authorization flaw (CWE-862) via the POST /api/v3/hosts/search/asstdetail endpoint. This vulnerability exists because the route is mapped to SkipAction, and the SearchHostWithAsstDetail function fails to invoke Au...

EUVD-2026-114064

Tencent BlueKing CMDB bk-cmdb through 3.14.6 contains a missing authorization vulnerability that allows authenticated users to view hosts of other businesses via POST /api/v3/hosts/search/asstdetail. Attackers can submit host search conditions targeting other businesses or omitting business filte...

CVE-2026-119648: TencentBlueKing bk-cmdb: Tencent BlueKing CMDB (bk-cmdb) through 3.14.6 contains a missing authorization vulnerability that allows authenticated…

Tencent BlueKing CMDB bk-cmdb through 3.14.6 contains a missing authorization vulnerability that allows authenticated users to view hosts of other businesses via POST /api/v3/hosts/search/asstdetail. Attackers can submit host search conditions targeting other businesses or omitting business filte...

PT-2026-133578

Tencent BlueKing CMDB bk-cmdb through 3.14.6 contains a missing authorization vulnerability that allows authenticated users to view hosts of other businesses via POST /api/v3/hosts/search/asstdetail. Attackers can submit host search conditions targeting other businesses or omitting business filte...

com.amazonaws:athena-aws-cmdb (>=2026.28.1, <=2026.43.1), com.amazonaws:athena-cloudwatch (>=2026.28.1, <=2026.43.1) +201 more potentially affected by CVE-2026-68495 via com.fasterxml.jackson.dataformat:jackson-dataformat-cbor (>=2.22.0, <=2.22.1)

com.fasterxml.jackson.dataformat:jackson-dataformat-cbor MAVEN version =2.22.0, =2026.28.1, =2026.28.1, =2026.28.1, =2026.28.1, =2026.28.1, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.22.0, =2.22.0, =2.22.1 - com.ibm.cos:ibm-cos-java-sdk 2.15.2 - com.ibm.cos:ibm-cos-java-sdk-core 2.15.2 and more...

FortiOS Admin Login Panel - Detect

FortiOS admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FortiOS admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FortiOS Admin Login Panel - Detect',...

Malicious code in cmdb-worker-pckg (PyPI)

Source: kam193 f0039cc4672b957b253c70bf7a3d084574f8a10d21d6bc42d0fac2f2a3fd8400 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...

CVE-2026-48190

An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI information. Please note that CMDB has to be anabled and CustomerGroupSupport has to be used to be affected. This issue affects OTRS: 7.0.X...

CVE-2026-48190

An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI information. Please note that CMDB has to be anabled and CustomerGroupSupport has to be used to be affected. This issue affects OTRS: 7.0.X...

CVE-2026-48190

CVE-2026-48190 describes an incorrect permissions handling in OTRS External Interface and the ConfigItem List module that allows an authenticated customer to query CI information. Affected products/versions include OTRS 7.0.x, 8.0.x, 2023.x–2026.x prior to 2026.4.x, with CMDB enabled and Customer...

CVE-2026-48190 Incorrect handling of permissions in External Interface Config Item List module

An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI information. Please note that CMDB has to be anabled and CustomerGroupSupport has to be used to be affected. This issue affects OTRS: 7.0.X...