70033 matches found
CVE-2026-20360
Cisco Nexus Dashboard is affected by CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) and insecure handling issues, as part of a software hardening release from Cisco's internal security review. The CVSS 3.1 score is 8.8 (HIGH) with a network attack vector, low complexity, and...
EUVD-2026-81127
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
CVE-2026-81870 OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs
OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...
CVE-2025-63579
CVE-2025-63579 Unauthorized access to all user names and passwords entered in the Address Book feature found in Kyocera Command Center RX printers. Description Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that...
CVE-2026-73457
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users...
agentZ
AgentZ Zero Trust Agentic AI Platform Build, run, and govern AI agents. Secure by design. Every agent runs inside a default-deny sandbox and never receives a credential. Every agent action is traceable. AgentZ is a multi-tenant platform for running AI agents. It provides strong isolation...
EUVD-2026-81008
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface gNPSI enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users...
CVE-2026-73457
CVE-2026-73457 affects Arista EOS platforms with the gRPC Network Packet Sampling Interface (gNPSI) enabled. When the EosRpcAuth trace facility is explicitly activated on the Gnpsi agent, client credentials (username and password) are written in clear text to local or remote accounting logs, acce...
CVE-2026-73442
CVE-2026-73442 affects Arista EOS switches with VRRP configured (any version; authentication not required). The root cause is CWE-532 : peer device VRRP authentication credentials are written in cleartext to agent trace logs on the switch. An authenticated user with sufficient privileges (or a sy...
CVE-2026-73442 On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs (or a system receiving for
On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs or a system receiving forwarded log output to obtain the peer devic...
CVE-2026-59823 LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy
LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller with a valid virtual key can place apibase inside the userconfig request body to bypass isrequestbodysafe, which blocks top-level apibase and baseurl but...
CVE-2026-92729
SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers over the network can submit arbitrary funnel definitions to retrieve trace analytics — including identifiers, durations, span counts, serv...
CVE-2026-92729 SigNoz 0.88.0 through 0.141.0 - Missing Authentication on Trace Funnel Analytics Endpoints
SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit arbitrary funnel definitions to retrieve trace analytics including identifiers, durations, span counts, service topology, and...
threat-finder
OffSeq Threat Finder threat-finder finds the vulnerable software actually running on a host — not what a manifest claims — and tells you which findings are network-reachable. It resolves each running service and, with --scope all, every installed OS package to an exact Package-URL and matches it...
copy-fail-check
copy-fail-check CVE-2026-31431 Helper basado en https://copy.fail/ Copy Fail Vérification Rapide Helper interactif en bash pour vérifier l'exposition de base liée à CVE-2026-31431 Copy Fail et appliquer une atténuation temporaire basée sur algifaead. Compatibilité cible Conçu principalement pour ...
CVE-2026-85732
oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then...
SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156
SOC L1 Threat Investigation: MikroTik RouterOS Multiple Exposed Services Analyst: Jonatan Alexander Guerrero Gomez | Role Target: SOC L1 / Jr. Cybersecurity Analyst Status: Investigation Closed | Severity: High Executive Summary Proactive threat hunting exercise indentifying a public-facing...
CVE-2026-54167
A flaw was found in Pipelines-as-Code. The GitHub App provider incorrectly processes webhook events by accepting an untrusted X-GitHub-Enterprise-Host header as the API host before validating the webhook signature. An unauthenticated attacker can exploit this by sending a specially crafted webhoo...
CVE-2026-53959
CVE-2026-53959 - 4gaBoards 3.3.9 - User Information Disclosure This repo contains a Proof of ConceptPoC exploit for CVE-2026-53959 Disclaimer This project is provided for educational purposes and authorized security testing only. Do not use it against systems that you do not own or have permissio...
