PT-2026-51021

Name of the Vulnerable Software and Affected Versions Mercator versions prior to 2025.05.19 Description A Server-Side Request Forgery SSRF exists in the CVE configuration panel at the '/admin/config/parameters' endpoint. The testProvider method in ConfigurationController passes user-supplied inpu...

Unikrn: multiple vulnerabilities on your mautic server

Hi @unikrn! I found some vulnerabilities in you crm server: 1. By pass Cloudflare access: You Use Cloudflare Access on https://crm.unikrn.com . BUt this link bypassed Cloudflare Access: ████████/login This vulnerability generates the disclosure of important data: PHP info page: ██████████phpinfo ...

LG DVR LE6016D File Disclosure

---------------------------------------------------------------------- Title : LG DVR LE6016D - Remote File Disclosure Vulnerability 0day CVE-ID : none Product : LG Affected : All versions Impact : Critical Remote : Yes Product link:...

[SECURITY] Fedora 14 Update: glpi-mass-ocs-import-1.4.2-1.fc14

Plugin which allow OCS continuous synchronization and massive importation. The extension Config panel is provided to handle the synchronization option s...

IM Lock 2006 - Insecure Registry Permission Vulnerability

IM Lock 2006 - Insecure Registry Permission Vulnerability --------------------------------------------------------- Application: IM Lock 2006 Vendor: www.comvigo.com Corporation: Comvigo, Inc. Version: Latest: 2 March 2006 - Home Edition, Enterprise & Professional Description: IM Lock 2006...