CVE-2023-0400

Trellix 데이터 손실 방지 DLP 우회 https://kcm.trellix.com/corporate/index?page=content&id=SB10394...

CVE-2026-42945

CVE-2026-42945 PoCGo चीनी | English nginx HTTP/2 कार्यान्वयन CVE-2026-42945 के लिए जांच एवं उपयोग सहायक उपकरण, जिसका उपयोग अधिकृत वातावरण में भेद्यता की उपस्थिति सत्यापित करने, सुधार प्रभाव की तुलना करने, और नियंत्रित प्रायोगिक वातावरण में PoC व्यवहार को पुनः उत्पन्न करने के लिए किया जाता है।...

User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion

The WP User Frontend plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check in the FrontendFormAjax::submitpost function. This makes it possible for unauthenticated attackers to delete attachment records through the plugin's AJAX handling when a public...

D-Link DNS-320 - Remote Code Execution

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...

McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting

McAfee Network Data Loss Prevention User-Agent 9.3.x contains a cross-site scripting vulnerability which allows remote attackers to get session/cookie information via modification of the HTTP request. id: CVE-2017-4011 info: name: McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting...

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

CVE-2023-22518

CVE-2023-22518 Schwachstelle durch fehlerhafte Autorisierung in Confluence Data Center und Server. Atlassian hat Administratoren vor einer schwerwiegenden Schwachstelle in Confluence gewarnt. Die Ausnutzung dieser Schwachstelle kann zu Datenverlust führen. Die Entwickler empfehlen daher, den Patc...

CVE-2026-71506

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API delete endpoint that allows authenticated attackers with invoice-deletion rights to permanently delete any payment record by bypassing the intended payment-issuance rights check. Attackers can exploit...

CVE-2026-76072

Continue CLI through 1.5.47 uses an incomplete denylist in evaluateTerminalCommandSecurity.ts as its sole barrier against destructive shell commands in headless and auto modes. The dangerous-path check covers only /, ~, /usr, /etc, /bin, and /sbin, leaving paths like /home, /root, /var, /opt, and...

CVE-2023-22518

CVE-2023-22518 Schwachstelle durch fehlerhafte Autorisierung in Confluence Data Center und Server. Atlassian hat Administratoren auf eine kritische Schwachstelle in Confluence hingewiesen. Die Ausnutzung dieses Problems kann zu Datenverlust führen, daher empfehlen die Entwickler dringend, die...

firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Data Loss Prevention component...

firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Data Loss Prevention component...

firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Data Loss Prevention component...

EUVD-2026-64323

Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties the target list's table...

SUSE CVE-2026-74983

Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2023-37598

CVE-2023-37598 — issabel-pbx 4.0.0-6: Site-übergreifende Anfragefälschung CSRF Übersicht CVE-ID: CVE-2023-37598 Schwachstellentyp: Site-übergreifende Anfragefälschung CSRF Betroffenes Produkt: issabel-pbx v4.0.0-6 Schweregrad: Mittel Entdeckt von: Sahil Ojha Offenlegungsdatum: 10.07.2023...

EUVD-2026-42235

Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import...

CVE-2026-72365

A flaw was found in the netfs component of the Linux kernel. This vulnerability arises from incorrect handling of NETFSRREQOFFLOADCOLLECTION during writethrough operations. This issue could lead to asynchronous OSYNC writes not being properly collected, potentially resulting in data inconsistency...

CVE-2026-18779

The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of its AJAX actions, allowing unauthenticated users to delete arbitrary appointment records along with their associated booking items and payment records...

CVE-2026-74983

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Data Loss Prevention component...