69604 matches found
CVE-2026-61908
Cyrus IMAP before 3.12.4 (also patched in 3.8.8 and 3.10.4) is affected by an out-of-bounds read in its JMAP email-header blob ID handling. An authenticated user can craft a JMAP blob ID of the form H- referencing an index beyond the bounds of the internal blob_headers array , causing a read past...
EUVD-2026-75132
An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to another user's calendar or address book could read even unshared events or contacts by including the target hrefs in a calendar-multiget or...
PT-2026-89205
Summary ModelView.sort query uses the attacker-controlled sortBy list-view query parameter without checking it against the configured column sortable list allow-list. The value is resolved with getattrmodel, ... and fed into relationship joins and order by, so a request can sort by any column of...
SAP NetWeaver AS ABAP Missing Authorization Check (3772838)
The version of SAP NetWeaver AS ABAP detected on the remote host is affected by a missing authorization check vulnerability as referenced in SAP Security Note 3772838: - Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker...
EUVD-2026-75137
Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 magefan/module-blog-graph-ql through 2.2.1 allows remote unauthenticated attackers to obtain blog commenter email addresses and internal customer and admin identifiers via a POST request to /graphql...
CVE-2026-79323
Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 magefan/module-blog-graph-ql through 2.2.1 allows remote unauthenticated attackers to obtain blog commenter email addresses and internal customer and admin identifiers via a POST request to /graphql...
EUVD-2026-75134
An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An authenticated user could attempt to download a crafted JMAP blob ID of the form H-, which could read past the end of the internal blobheaders array during download, exposing...
CVE-2026-61908
An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An authenticated user could attempt to download a crafted JMAP blob ID of the form H-, which could read past the end of the internal blobheaders array during download, exposing...
Security Advisory 0178
Security Advisory 0178 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73440 CVSSv3.1 Base Score: 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N CVSSv4.0 Base Score: 2.3...
Linux Distros Unpatched Vulnerability : CVE-2026-82070
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected...
PT-2026-89173
Summary With the Playwright web loader enabled, Open WebUI checks the address behind a user-submitted URL before allowing the request, then handed the request to the browser to perform. The browser resolved the hostname a second time, on its own, and that answer was never checked. An attacker who...
CVE-2023-40028
Prueba de Concepto PoC para CVE-2023-40028 CVE-2023-40028 es una vulnerabilidad en Ghost CMS que permite la lectura arbitraria de archivos mediante un manejo inadecuado de archivos. Esta PoC demuestra cĆ³mo funciona el exploit en condiciones controladas. Solo con fines educativos. Referencia:...
CVE-2024-24919-POC
CVE-2024-24919-POC Una herramienta simple para automatizar CVE-2024-24919 ExposiciĆ³n de InformaciĆ³n Sensible CaracterĆsticas FĆ”cil de usar. Comentarios Ćŗtiles; puede probar mĆŗltiples dominios Uso root@kitploit: git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ root@kitploit: cd...
Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache
Vulnerabilidad de almacenamiento en texto plano CVE-2023-5359 en W3 Total Cache Afecta a versiones ā¤2.7.5 vulnerables a CVE-2023-5359 import requests import re from urllib.parse import urljoin Common paths where credentials are stored CREDENTIALPATHS =...
CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo
š Laboratorio de Seguridad OAuth: Simulador Educativo CVE-2025-4679 Un entorno seguro y aislado para aprender sobre vulnerabilidades OAuth sin arriesgar sistemas reales š Inicio RĆ”pido | š Ruta de Aprendizaje | š”ļø Entorno Seguro | š„ Contribuyentes š Resumen Este laboratorio educativo simula la...
CVE-2023-49367
CVE-2023-49367 - ExposiciĆ³n de Datos Sensibles ExposiciĆ³n de datos sensibles en el Panel Web de la Impresora Kyocera Fabricante: Kyocera Corporation Versiones Afectadas: Command Center RX - EXOSYS M5521cdn DescripciĆ³n DespuĆ©s de conectarse a la libreta de direcciones de la interfaz de Kyocera, se...
CVE-2026-86085
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. A caller with role:manageProject could name a project the...
CVE-2023-5359
CVE-2023-5359 - W3 Total Cache Cleartext Storage Vulnerability Description CVE-2023-5359 is a cleartext storage vulnerability affecting the WordPress plugin W3 Total Cache in versions ā¤ 2.7.5. This vulnerability allows remote attackers to access sensitive credentials stored in unencrypted PHP fil...
CVE-2025-55182-react2shell
CVE-2025-55182: Detector de Componentes de Servidor de React RSC Expuestos Este repositorio contiene una plantilla de Nuclei para detectar la exposiciĆ³n de Componentes de Servidor de React asociada con CVE-2025-55182. La vulnerabilidad afecta a aplicaciones construidas con React/Next.js donde la...
