15691 matches found
CVE-2026-20316
A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...
CVE-2026-20316 Cisco Secure Firewall Management Center Software Static Credential Vulnerability
A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...
Cisco Secure Firewall Management Center Software Static Credential Vulnerability
A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-20316link is external Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability This type of vulnerability is a frequent attack vector...
CVE-2026-56407
An integer overflow exists in libexpat's doProlog function due to improper handling of entity value lengths. A local attacker could exploit this to execute arbitrary code or access sensitive system data. Mitigation To prevent exploitation explicitly disable all internal and external XML entity...
Exploit for CVE-2026-61511
CVE-2026-61511 CVE-2026-61511 – vBulletin Pre-Auth RCE CVSS 9...
File-Tunnel v3.5.0
File Tunnel Tunnel TCP connections through a file server. A full list of supported file systems can be found here. Download Portable executables for Windows, Linux and Mac can be found over in the releases section. Example 1 - Bypassing a firewall You'd like to connect from Host A to Host B, but ...
CVE-2026-20316: Use of Hard-coded Password
A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems. This vulnerability is due to the presen...
PT-2026-65844
Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Management Center affected versions not specified Description The web interface contains static user credentials for a low-privileged account. An unauthenticated remote attacker can use these hard-coded credentials to log...
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
Cisco Secure Firewall Management Center FMC formerly known as Firepower Management Center contains a use of hard-coded password vulnerability that could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the...
MAL-2026-11156 Malicious code in vtranalytic (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897fa80f1d8a55ff480d6c7e7a71200ac31530a9f5d928389545b597c7b45903 The package implements a full remote-administration toolkit controlled through a Telegram bot. It polls the Telegram Bot API at...
Malicious code in app-sima-layer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a34ad4e52b9e8255bcfa74cbb6aa18811b0c8d80819a75c6bbfc36d79757b66 The package's postinstall script performs three coordinated attacks against the installer at install time. First, on Linux it fetches an SSH public k...
Malicious code in api-node-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8133fdea40df12d51091c8ce094062f366f0c30be0d17667a827ed00b75f78a On npm install, the package's postinstall hook node test.js executes an attacker-controlled workflow against the installer's host. It recursively sca...
Malicious code in app-soda-layer (npm)
app-soda-layer 2.1.6 is an npm credential stealer and SSH backdoor that runs automatically on npm install through a postinstall hook test.js. It harvests Solana keypairs id.json, config.toml and .env secrets, then installs an operator-supplied SSH key into /.ssh/authorizedkeys and opens port 22 f...
MAL-2026-11128 Malicious code in app-soda-layer (npm)
app-soda-layer 2.1.6 is an npm credential stealer and SSH backdoor that runs automatically on npm install through a postinstall hook test.js. It harvests Solana keypairs id.json, config.toml and .env secrets, then installs an operator-supplied SSH key into /.ssh/authorizedkeys and opens port 22 f...
LuLu v4.4.3
LuLu 简体中文 | 正體中文 LuLu is the free open-source macOS firewall: Documentation: Full details and usage instructions can be found here. To Support: ❤ Love this product and want to support it? Please check out my patreon page. Read more...
SafeLine v9.3.11
SafeLine - Make your web apps secure 🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋♂️ Discord | 中文版 👋 INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...
EUVD-2026-49665
Unauthenticated Cross Site Scripting XSS in Spam protection, AntiSpam, FireWall by CleanTalk = 6.82 versions...
Security Notice - Statement on Remote Code Execution Vulnerability in Fastjson2
Following the discovery of the remote code execution vulnerability in Fastjson2, Huawei has launched an immediate investigation. Attackers controlling JSON requests can exploit this vulnerability to execute arbitrary code on the target server. The investigation is completed. If you have deployed...
