CVE-2026-82817

A vulnerability was found in dibo-software diboot 3.8.0. Affected by this issue is some unknown functionality of the file /admin/ of the component Tenant Administrator Management API. Performing a manipulation of the argument tenantId results in improper access controls. The attack may be initiat...

CVE-2026-82818 dibo-software diboot Tenant Resource Assignment resource access control

A vulnerability was determined in dibo-software diboot 3.8.0. This affects an unknown part of the file /api/iam/tenant/resource of the component Tenant Resource Assignment Handler. Executing a manipulation of the argument tenantId can lead to improper access controls. The attack may be launched...

CVE-2026-82817

dibo-software diboot 3.8.0 is affected by an improper access control vulnerability in the Tenant Administrator Management API (file /admin/). Manipulating the tenantId argument allows a remote, low-privileged attacker to bypass access controls, leading to low confidentiality, integrity, and avail...

EUVD-2026-68683

A vulnerability has been found in dibo-software diboot 3.8.0. Affected by this vulnerability is an unknown functionality of the file /api/ai-session/ of the component AI Session Endpoint. Such manipulation leads to authorization bypass. The attack can be launched remotely. The exploit has been...

CVE-2015-1579

CVE-2015-1579 - WP Revslider AFD Exploit: Wordpress Slider Revolution Responsive = 4.1.4: root@kitploit: Fecha de vulnerabilidad: 24/07/2014 Autor del exploit: anarc0der Versión: Wordpress Slider Revolution Responsive = 4.1.4 CVE : CVE-2015-1579 Cómo usar: root@kitploit: python3 xpl.py...

CVE-2026-82808

Inbox Foundry ActiveInbox Extension (up to version 7.10.24 , Chrome) ships a hard-coded Google OAuth Client Secret in the file dist/service-worker.production-esm.js . The vulnerability allows remote, unauthenticated attackers with no user interaction to leverage the exposed credential. The exploi...

CVE-2026-82808 Inbox Foundry ActiveInbox Extension Google OAuth Client Secret service-worker.production-esm.js hard-coded credentials

A vulnerability was identified in Inbox Foundry ActiveInbox Extension up to 7.10.24 on Chrome. Impacted is an unknown function of the file dist/service-worker.production-esm.js of the component Google OAuth Client Secret. Such manipulation leads to hard-coded credentials. The attack can be execut...

EUVD-2026-68653

A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly...

CVE-2026-82805

Typora (versions up to 1.13.8/1.14.6) is affected by a cross-site scripting (XSS) vulnerability in its Mermaid Rendering Engine . The flaw is triggered by manipulation of the classDef/style argument, and the attack can be launched remotely, though it requires user interaction (e.g., opening a cra...

CVE-2026-82801

A vulnerability was detected in NASA earthdata-search 1.0.0. Affected by this vulnerability is the function scaleImage of the file serverless/src/scaleImage/handler.js of the component scale Endpoint. Performing a manipulation results in server-side request forgery. The attack can be initiated...

CVE-2026-82702

A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component aspWlanMP Endpoint. Such manipulation of the argument ateFunc leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly...

offsec-lab

OffSec Lab — Classic CVE Exploitation Labs + Knowledge Base A...

CVE-2026-82801 NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgery

A vulnerability was detected in NASA earthdata-search 1.0.0. Affected by this vulnerability is the function scaleImage of the file serverless/src/scaleImage/handler.js of the component scale Endpoint. Performing a manipulation results in server-side request forgery. The attack can be initiated...

CVE-2026-82801 NASA earthdata-search scale Endpoint handler.js scaleImage server-side request forgery

A vulnerability was detected in NASA earthdata-search 1.0.0. Affected by this vulnerability is the function scaleImage of the file serverless/src/scaleImage/handler.js of the component scale Endpoint. Performing a manipulation results in server-side request forgery. The attack can be initiated...

CVE-2026-82801

NASA earthdata-search 1.0.0 contains a server-side request forgery (SSRF) in the scaleImage function of serverless/src/scaleImage/handler.js (the scale Endpoint component). An unauthenticated remote attacker can trigger the flaw with low complexity, leading to low impact on confidentiality, integ...

EUVD-2026-68578

A vulnerability was detected in NASA earthdata-search 1.0.0. Affected by this vulnerability is the function scaleImage of the file serverless/src/scaleImage/handler.js of the component scale Endpoint. Performing a manipulation results in server-side request forgery. The attack can be initiated...

CVE-2026-82703

An OS command injection vulnerability exists in Edimax BR-6214K firmware 1.40 , specifically in the asp_setPing endpoint within www/ping.asp. The system function processes the pingstr argument without proper sanitization, allowing a remote, high-privileged attacker to inject and execute arbitrary...

EUVD-2026-68576

A security flaw has been discovered in Edimax BR-6214K 1.40. This vulnerability affects the function system of the file www/ping.asp of the component aspsetPing Endpoint. Performing a manipulation of the argument pingstr results in os command injection. The attack can be initiated remotely. The...

CVE-2026-82702 Edimax BR-6214K asp_WlanMP Endpoint wlanMP.asp system os command injection

A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component aspWlanMP Endpoint. Such manipulation of the argument ateFunc leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly...

EUVD-2026-68595

A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component aspWlanMP Endpoint. Such manipulation of the argument ateFunc leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly...