Nginx UI - Broken Access Control

Network attackers can fully control nginx service, including config modification and service restart, leading to complete service takeover. id: CVE-2026-33032 info: name: Nginx UI - Broken Access Control author: DhiyaneshDk severity: critical description: | Network attackers can fully control ngi...

CVE-2025-2528

Devolutions Remote Desktop Manager on Windows is affected by an improper authorization flaw in the application password policy. This vulnerability allows an authenticated user to utilize a configuration that differs from the requirements mandated by system administrators. The issue impacts versio...

CVE-2023-34040

CVE-2023-34040 affects VMware Tanzu Spring for Apache Kafka (versions 3.0.9 and earlier; 2.9.10 and earlier). The issue is a deserialization attack via specially crafted DeserializationException headers in messages when an application does not use an ErrorHandlingDeserializer for keys/values and ...