Joomla! Component Love Factory 1.3.4 - Local File Inclusion

A directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1957 info: name: Joomla! Component Love Factory 1.3.4 - Local File Inclusion...

EUVD-2026-63688

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-63623

Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...

CVE-2026-66800

Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...

CVE-2026-62834

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability

...

CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability

...

CVE-2026-66800

An SSRF flaw in Azure Data Factory lets an unauthenticated network attacker disclose sensitive information (CVSS 8.6 HIGH, scope changed). No exploit details are provided; Microsoft has published an update guide at the referenced MSRC link. Monitor for patch details and apply Azure Data Factory u...

CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability

...

CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability

...

CVE-2026-62834

CVE-2026-62834 is a critical elevation of privilege vulnerability in Azure Data Factory caused by improper verification of a cryptographic signature. An unauthorized attacker can exploit this over the network to elevate privileges, with high impact on both confidentiality and integrity (CVSS 3.1:...

Azure Data Factory Information Disclosure Vulnerability

Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...

Azure Data Factory Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...

PT-2026-79195

Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...

PT-2026-79203

Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...

CVE-2026-63335

creationtimestamp| type| source ---|---|--- 2026-08-18 18:35:15+00:00| published-proof-of-concept| https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-qx7j-jv8m-fppr...

EUVD-2026-41135

mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"...

CVE-2026-15413

The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key except for the health check...

CVE-2026-15413

The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key except for the health check...

CVE-2026-15413 Link Factory - Backdoor

The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key except for the health check...