CVE-2026-86157

Progress Telerik Fiddler Everywhere versions prior to 8.2.0 are vulnerable to the exposure of privileged IPC functionality . A local, low-privileged attacker who can modify application launch parameters and influence a user to start the application can replace the UI or settings with attacker-con...

CVE-2026-86157 Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...

CVE-2026-86157 Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...

CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

CVE-2026-52748

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the...

CVE-2026-52748 Missing authentication for backup functionality in Kaon AR2140X

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the...

CVE-2026-52748

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. An unauthenticated remote attacker can trigger a configuration backup and retrieve it, although the data is encrypted with a device-specific key. Critically, triggering this funct...

EUVD-2026-88246

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the...

CVE-2026-52748 Missing authentication for backup functionality in Kaon AR2140X

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the...

Zimbra-CVE-2017-8802-Hotifx

CVE-2017-8802 Этот Zimlet исправляет CVE-2017-8802, отключая функциональность «Show Fragment» / Snippet. Дополнительная информация: https://wiki.zimbra.com/wiki/ZimbraSecurityAdvisories Как развернуть Zimlet https://www.zimbra.com/docs/os/6.0.10/administrationguide/Zimlets.11.4.html...

CVE-2026-52748: Missing Authentication for Critical Function

The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated remote attacker to trigger a configuration backup and retrieve it in a form encrypted by a device-specific key. Triggering this function renders the...

CVE-2026-73642: Improper Limitation of a Pathname to a Restricted Directory

Dayforce Payroll is vulnerable to Path Traversal in file download functionality. An unauthenticated attacker can sent GET request with file path parameter set to any path including an absolute local file path. Because vendor contact attempts were unsuccessful, the vulnerability has only been...

CVE-2025-25705

CVE-2025-25705 설명 항목: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix 취약점 유형: 원격 코드 실행 취약점 설명: 이 취약점은 사용자가 Unix 환경에서 ping 기능을 사용할...

CVE-2026-76581

CVE-2026-76581 Пожертвования Помогите поддерживать этот проект Если вы находите этот проект полезным, пожалуйста, рассмотрите возможность поддержки его дальнейшего развития через PayPal или ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Десять процентов...

rConfig_rce

rConfig 3.9 Preuve de concept combinée d'injection SQL et d'injection de commandes Aperçu Cette PoC cible la version 3.9.4 de rConfig et démontre l'exploitation via une combinaison de vulnérabilités d'injection SQL et d'injection de commandes à distance. Elle automatise le processus suivant : 1...

CVE-2024-49379

Proof of Concept PoC для CVE-2024-49379 Этот репозиторий содержит Proof of Concept PoC на Python для критической уязвимости, обнаруженной в UmbrelOS. Уязвимость позволяет выполнять межсайтовый скриптинг XSS, который при определённых условиях может привести к удалённому выполнению кода RCE. Обзор...

CVE-2022-43980

CVE-2022-43980 Vulnérabilité de Cross Site Scripting stockée dans la fonctionnalité d'édition des cartes réseau de PandorAFMS Titre de l'exploit : Cross Site Scripting stocké Date : 15/02/2023 Auteur de l'exploit : Gaurish Kauthankar Page d'accueil du fournisseur : https://pandorafms.com/en/ Lien...

CVE-2025-14269

CVE-2025-14269 Проблема безопасности была обнаружена в версии Headlamp, работающей внутри кластера, где неаутентифицированные пользователи могут повторно использовать кэшированные учётные данные для доступа к функциональности Helm через пользовательский интерфейс Headlamp. Кластеры Kubernetes...

Astra Linux – Vulnerability in Chromium

Information leaks in geolocation functionality in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to obtain sensitive information through a crafted HTML page, using social engineering techniques. Chromium security severity: Medium...

CVE-2026-100378

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - Translate Extension: from before 1.46.1, 1.45.5, 1.43.10...