Lucene search
+L

14002 matches found

Github Security Blog
Github Security Blog
•added 2026/04/27 12:30 p.m.•28 views

Apache Camel Vulnerable to Authentication Bypass Using an Alternate Path or Channel

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenticationConfigurer and...

8.2CVSS5.9AI score0.01033EPSS
SaveExploits1References10Affected Software1
NVD
NVD
•added 2026/04/27 10:16 a.m.•26 views

CVE-2026-40022

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenticationConfigurer and...

8.2CVSS0.01033EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2026/04/27 9:40 a.m.•16 views

CVE-2026-40022

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenticationConfigurer and...

5.9AI score0.01033EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
•added 2026/04/27 9:40 a.m.•25 views

EUVD-2026-25807

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenticationConfigurer and...

8.2CVSS5.9AI score0.01033EPSS
SaveExploits1References1
NVD
NVD
•added 2026/04/27 9:16 a.m.•23 views

CVE-2026-42379

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1...

7.7CVSS0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/27 8:26 a.m.•54 views

CVE-2026-42379 WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1...

7.7CVSS0.00371EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/27 8:26 a.m.•20 views

EUVD-2026-25797

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1...

7.7CVSS5.2AI score0.00371EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/27 8:26 a.m.•35 views

CVE-2026-42379

CVE-2026-42379 affects the WordPress WPDeveloper Templately plugin

7.7CVSS5.8AI score0.00371EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•41 views

PT-2026-35374

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1...

7.7CVSS5.2AI score0.00371EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•22 views

PT-2026-35385

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.14.1 through 4.14.5 Apache Camel versions 4.18.0 through 4.18.1 Description When authentication is enabled on the embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/27 12:00 a.m.•7 views

CVE-2026-42379: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1...

7.7CVSS5.8AI score0.00371EPSS
SaveExploits0References2
Fedora
Fedora
•added 2026/04/25 1:57 a.m.•21 views

[SECURITY] Fedora 44 Update: cef-146.0.11^chromium146.0.7680.177-2.fc44

CEF is an embeddable build of Chromium, powered by WebKit Blink...

9.6CVSS7AI score0.00703EPSS
SaveExploits2
Fedora
Fedora
•added 2026/04/25 1:52 a.m.•30 views

[SECURITY] Fedora 44 Update: rauc-1.15.2-1.fc44

RAUC is a lightweight update client that runs on your Embedded Linux device and reliably controls the procedure of updating your device with a new firmwa re revision. RAUC is also the tool on your host system that lets you create, inspect and modify update artifacts for your device. Service is no...

7.2CVSS5.9AI score0.00229EPSS
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/04/25 12:00 a.m.•35 views

UNSEEN: A Cross-Stack LLM Unlearning Defense against AR-LLM Social Engineering Attacks

Emerging AR-LLM-based Social Engineering attack e.g., SEAR is at the edge of posing great threats to real-world social life. In such AR-LLM-SE attack, the attacker can leverage AR Augmented Reality glass to capture the image and vocal information of the target, using the LLM to identify the targe...

5.4AI score
SaveExploits0
NVD
NVD
•added 2026/04/24 8:16 p.m.•31 views

CVE-2026-41503

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMultiple service property decoder allows unauthenticated remote attackers to read past allocated buffer boundaries by sending an RP...

8.7CVSS0.00597EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2026/04/24 7:41 p.m.•43 views

CVE-2026-41503 BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMultiple service property decoder allows unauthenticated remote attackers to read past allocated buffer boundaries by sending an RP...

8.7CVSS6.2AI score0.00597EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2026/04/24 7:39 p.m.•13 views

CVE-2026-41475 BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's WritePropertyMultiple service decoder allows unauthenticated remote attackers to read past allocated buffer boundaries by sending a truncated W...

8.7CVSS6.2AI score0.0067EPSS
SaveExploits1References1
NVD
NVD
•added 2026/04/24 12:16 a.m.•19 views

CVE-2026-40620

A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorization on the SenseLive config application. The service accepts management connections from any reachable host, enabling unrestricted...

9.8CVSS0.00832EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/24 12:02 a.m.•50 views

CVE-2026-40620 SenseLive X3050 Missing authentication for critical function

A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorization on the SenseLive config application. The service accepts management connections from any reachable host, enabling unrestricted...

9.8CVSS0.00832EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/24 12:02 a.m.•42 views

CVE-2026-40620

SenseLive X3050 is affected by a network‑accessible vulnerability in its embedded management service that permits full administrative control without authentication or authorization. The issue enables any reachable host using a vendor or compatible client to modify critical configuration paramete...

9.8CVSS5.8AI score0.00832EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder