58939 matches found
CVE-2026-78616
A Stored XSS vulnerability in WatchGuard Dimension 's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate. The CVSS 4.0 score is 4.8 (MEDIUM) , ref...
CVE-2026-78103 Dimension Log Server Configuration Lock Bypass Vulnerability
WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first...
CVE-2026-78498
CVE-2026-78498 is a server-side request forgery (SSRF) vulnerability in the WatchGuard Dimension Email Server Test configuration . An authenticated privileged attacker can use this flaw to enumerate exposed network services on adjacent network systems . The CVSS 4.0 score is 5.1 (Medium) , reflec...
CVE-2026-78103
WatchGuard Dimension (Log Server) is affected by a configuration lock bypass in its server-side configuration endpoint. The product provides a client-side lock/unlock UI control for management changes, but the server-side endpoint does not enforce this workflow state. As a result, an authenticate...
web-server-audit_CVE-2026-42945
webserveraudit Non chiederti se sei vulnerabile. Chiediti se sei sfruttabile. Uno strumento Python in un singolo file che controlla nginx e Apache rispetto a CVE note verificando sia la versione installata sia se il percorso di codice vulnerabile è effettivamente raggiungibile tramite la tua...
alibaba__nacos_CVE-2021-44667_2-0-3
Nacos: il S ervice dinamico di Na ming e Co nfiguration...
CVE-2021-41773
CVE-2021-41773 Apache HTTP-Server-Schwachstelle funktioniert nur mit 2.4.49 Erforderliche Einstellungen httpd.conf root@kitploit: ... LoadModule cgimodule modules/modcgi.so uncomment this line ... AllowOverride none Require all denied comment out this line or set Require all granted ... Referenze...
CiscoSpill
CiscoSpill Apenas uma ferramenta PoC para extrair senhas usando CVE-2019-1653. CVE-2019-1653 Uma vulnerabilidade na interface de gerenciamento baseada na web dos roteadores Cisco Small Business RV320 e RV325 Dual Gigabit WAN VPN poderia permitir que um atacante remoto não autenticado recuperasse...
CVE-2026-75548
CVE-2026-75548 affects the web management interface of the Ebyte NE2-D11 device. The interface lacks a frame-restriction mechanism (e.g., X-Frame-Options or CSP frame-ancestors), allowing an unauthenticated remote attacker to embed the interface within a crafted external page. This enables a clic...
CVE-2026-75548 Ebyte NE2-D11 Improper Restriction of Rendered UI Layers or Frames
The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a crafted webpage to mislead an authenticated administrator into initiating unintended configuration changes or disruptive...
CVE-2026-73125
Ebyte NE2-D11 devices are affected by a missing authentication flaw in the web management interface . The interface does not consistently enforce authentication before granting access to administrative functionality, allowing an unauthenticated remote attacker to read sensitive configuration data...
CVE-2026-73125 Ebyte NE2-D11 Missing Authentication for Critical Function
Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability...
autochrome
autochrome Dieses Tool lädt eine brandneue Kopie von Chromium herunter, installiert und konfiguriert sie. Es enthält nützliche Dinge wie: Deaktiviert all diese lästigen Auto-Updater! Hübsche farbige Themes für hohe Sichtbarkeit! Kein XSS-Auditor! Automatische Proxy-Konfiguration! verwendet...
cowcloud
CowCloud una soluzione serverless per distribuire carichi di lavoro in AWS CowCloud è stato originariamente creato per eseguire strumenti di ricognizione e scan di vulnerabilità in modo distribuito; per esempio, un caso d'uso potrebbe essere quello dei cacciatori di bug bounty. Questa soluzione è...
go-pillage-registries
go-pillage-registries यह प्रोजेक्ट एक Docker रजिस्ट्री लेता है और उसकी सूची catalog में मौजूद प्रत्येक इमेज के manifest और configuration को निकालता है। यह Google के crane कमांड के पैकेज का उपयोग करता है, जो Docker की keychain semantics का पालन करता है। यदि आप इसे ओवरराइड करना चाहते हैं, तो...
behat-config-leaks
Badge Licenza MIT Installazione...
CVE-2025-4427-CVE-2025-4428
CVE-2025-4428 e CVE-2025-4427 CVE-2025-4428 è una vulnerabilità di esecuzione remota di codice post-autenticazione in DeviceFeatureUsageReportQueryRequestValidator di EPMM. Deriva dalla gestione non sicura dell'input fornito dall'utente all'interno dei messaggi di errore elaborati tramite...
CVE-2026-59322
The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserializes embedded JSON headers into a plain Map and constructs a GenericMessage with MutableMessageHeaders without sanitizin...
CVE-2026-59284
There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled. Spring Cloud Commons 5.0.0 - 5.0.2 Spring Cloud Commons 4.3.0 - 4.3.3 Spring Cloud Commons 4.0.0 - 4.2.6 Spring Cloud Commons 3.1.10 and earlier...