EUVD-2026-92090

A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function getenvironment of the file goldenverba/components/util.py of the component generatestream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attack...

The vulnerability of the setBufferingPeriodSEI function in the vvdecapp component (VVdeC), which relates to reading beyond the buffer, allows a hacker to trigger a service failure or gain access to protected information.

The vulnerability of the setBufferingPeriodSEI function in the vvdecapp VVdeC component is related to reading data beyond the buffer’s capacity. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...

The vulnerability of the software interface (REST API) of the GEO.RITM software lies in the lack of authentication when accessing the function for retrieving object attributes. This allows attackers to gain unauthorized access to confidential information.

The vulnerability of the GEO.RITM software’s RESTful API lies in the lack of authentication when accessing the function for retrieving object attributes. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential information...

The vulnerability of the Serial Wire Debug interface (SWD) in the highly integrated wireless system on chip (SoC) Realtek RTL8762C allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...

The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

The vulnerability in the kernel of operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS allows attackers to disclose protected information.

The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS is related to a kernel address leakage. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...

The vulnerability of the Squadus software, related to the storage of information in an open manner, allows a intruder to disclose the protected information.

The vulnerability of the Squadus software lies in the fact that information is stored in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the ClamAV antivirus software lies in its insufficient validation of input data, allowing attackers to circumvent existing security restrictions.

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the FOQUZ platform, related to insufficient protection of operational data, allows attackers to disclose the protected information.

The vulnerability of the FOQUZ platform is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the FOQUZ platform, related to the disclosure of information in debugging messages, allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the FOQUZ platform is related to the disclosure of information in debugging messages. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality of the protected information...

The vulnerability of the FOQUZ platform, related to incorrect restrictions on path names in the catalog, allows attackers to compromise the accessibility of protected information.

The vulnerability of the FOQUZ platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of the protected information...

The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

CVE-2001-0934

CVE-2001-0934 Cooolsoft PowerFTP Server 2.03 permite a atacantes remotos obtener la ruta física de la raíz del servidor mediante el comando pwd, que lista la ruta completa. Publicación de Securiteam en http://www.securiteam.com/exploits/6D00L2A35K.html Información externa en...

CVE-2021-40352

CVE-2021-40352 Opnemr Versión 6.0.0 Tiene una vulnerabilidad de seguridad donde un atacante que tiene acceso de médico puede leer mensajes que fueron enviados a otros miembros, incluyendo mensajes de administrador. la vulnerabilidad existe en la función de impresión de mensajes =...

CVE-2023-28432

CVE-2023-28432 MinIO tiene una vulnerabilidad de fuga de información. Un atacante remoto no autenticado puede obtener todas las variables de entorno, incluyendo MINIOSECRETKEY y MINIOROOTPASSWORD, mediante el envío de una solicitud HTTP especial, lo que provoca una fuga de información sensible y...

CVE-2019-18276

-Para explotar la vulnerabilidad CVE-2019-18276, abra este directorio en un terminal y ejecute los comandos: cd ./demonstration ./make -Los comandos a escribir en la máquina virtual son: ./creationsecret.sh hacker ./exploit.sh 1000 enable -f ./libpwn.so asd cat /home/victime/.secret.txt...

CVE-2023-35636

CVE-2023-35636 Vulnerabilidad de divulgación de información de Microsoft Outlook filtración de hash de contraseña - Script POC en Expect CVE-2023-35636 es un exploit de la función de compartir calendario en Microsoft Outlook, mediante el cual agregar dos encabezados a un correo electrónico dirige...

FortiOS-Credentials-Disclosure

FortiOS-Credentials-Disclosure CVE-2018-13379 Exploit Uso : python CVE-2018-13379.py list.txt...

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server Directory Traversal Spring Cloud Config, versiones 2.1.x anteriores a 2.1.2, versiones 2.0.x anteriores a 2.0.4, versiones 1.4.x anteriores a 1.4.6, y versiones antiguas sin soporte, permiten a las aplicaciones servir archivos de configuración arbitrario...

CVE-2022-44311

Lectura Fuera de los Límites en html2xhtml : CVE-2022-44311 Resumen Html2xhtml v1.3 se descubrió que contiene una lectura fuera de los límites en la función static void elmclosetreenodet nodo en procesador.c. Esta vulnerabilidad permite a los atacantes acceder a archivos sensibles o causar una...