Rocky Linux 9.2 [CIQ] Security Update: rubygem-io-console / rubygem-io-console-debuginfo (ciqsa-2026_1288)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261288 advisory. This advisory aggregates security fixes for the ruby SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2024-49761. Tenable has extracted the preceding description bloc...

Rocky Linux 10.2 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (crlsa-2026_18537)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202618537 advisory. tomcat: Apache Tomcat: Security constraint bypass for CGI scripts CVE-2025-46701 org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session...

AlmaLinux 9.2 [TuxCare] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc (ALMALINUX9.2:CLSA-2025:1740132708)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1740132708 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8,...

CVE-2026-100299

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption...

CVE-2026-100299 Use of Weak Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption...

CVE-2026-100299

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 is vulnerable due to the inclusion of a legacy password hash on the serial console . This hash relies on weak DES-based encryption , which may allow for unauthorized access via physical means. No specific exploit information or remediation steps are...

EUVD-2026-89408

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption...

CVE-2026-100299 Use of Weak Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption...

CVE-2015-3224-

CVE-2015-3224- juste une version stupide pour CVE-2015-3224, pour console web. besoin de configurer un serveur web pour pty.py...

CVE-2020-14883

CVE-2020-14883 Oracle WebLogic Server Exécution de code à distance RCE authentifiée Vulnérabilité dans le produit Oracle WebLogic Server d'Oracle Fusion Middleware composant : Console. Les versions prises en charge qui sont affectées sont 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 et...

CVE-2026-2586

RCE par injection EL dans GlassFish authentifié CVE-2026-2586 Une vulnérabilité d'injection de langage d'expression Expression Language dans la console d'administration GlassFish permet à un utilisateur authentifié d'injecter des expressions EL malveillantes dans des paramètres traités par...

CVE-2026-4034

Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console...

CVE-2026-4034 TIBCO Administrator Injection Vulnerability

Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console...

CVE-2026-4034 TIBCO Administrator Injection Vulnerability

Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console...

CVE-2026-4034

An injection vulnerability exists in TIBCO Administrator version 5.13.0 and prior . This flaw allows an authenticated user to submit specially crafted input through the web-based administration console . The vulnerability carries a High base severity score of 8.7 , with potential impacts on confi...

EUVD-2026-88813

Injection Vulnerability in Tibco Administrator version 5.13.0 & prior allows an authenticated user to submit specially crafted input through the web-based administration console...

CVE-2020-14882-WebLogic-Analysis

Ресерч уязвимостей: Эксплуатация цепочки CVE-2020-14882 и CVE-2020-14883 в Oracle WebLogic Server Репозиторий содержит технический отчет Write-up и концептуальный Proof of Concept PoC для демонстрации цепочки уязвимостей обхода авторизации Authentication Bypass и удаленного выполнения кода RCE в...

TIBCO Security Advisory: September 29, 2026 - TIBCO Administrator - CVE-2026-4034

TIBCO Administrator Injection Vulnerability Original release date: September 29, 2026 Last revised: --- CVE-2026-4034 Source: TIBCO Software Inc. Description Multiple Injection vulnerability has been discovered in TIBCO Administrator. Refer below for further details Products Affected TIBCO...

symfony

Symfony est un framework PHP pour les applications web et console ainsi qu'un ensemble de composants PHP réutilisables. Symfony est utilisé par des milliers d'applications web et par la plupart des projets PHP populaires. Installation Installer Symfony avec Composer voir les détails des prérequis...

cve-2020-24572

CVE-2020-24572 Un problème a été découvert dans includes/webconsole.php de RaspAP 2.5. Avec un accès authentifié, un attaquant peut utiliser une console web mal configurée et pratiquement sans restriction pour attaquer le système d'exploitation sous-jacent qui exécute ce logiciel, et exécuter des...