9 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-119568
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssldataaccept that allows unauthenticated attackers to hijack FTPS data connections by...
CVE-2026-119568
vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssldataaccept that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a ticket via AUTH TLS, then connect to the...
EUVD-2026-113833
vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssldataaccept that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a ticket via AUTH TLS, then connect to the...
EUVD-2019-6005
Malware in sbrugna...
CVE-2025-55287
Genealogy is a family tree PHP application. Prior to 4.4.0, Authenticated Stored Cross-Site Scripting XSS vulnerability was identified in the Genealogy application. Authenticated attackers could run arbitrary JavaScript in another user’s session, leading to session hijacking, data theft, and UI...
Mitsubishi Electric GOT2000 and GOT SIMPLE (CVE-2023-3373)
Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 and prior and GOT SIMPLE Series GS21 model versions 01.49.000 and prior allows a remote unauthenticated attacker to hijack data connections session hijacking ...
Design/Logic Flaw
Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 and prior and GOT SIMPLE Series GS21 model versions 01.49.000 and prior allows a remote unauthenticated attacker to hijack data connections session hijacking ...
CVE-2017-17825
The Batch Manager component of Piwigo 2.9.2 is vulnerable to Persistent Cross Site Scripting via tags- array parameters in an admin.php?page=batchmanager&mode=unit request. An attacker can exploit this to hijack a client's browser along with the data stored in it...
Multiple Cross-Site Scripting Vulnerabilities in Fortinet FortiManager
Fortinet FortiManager is a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices and the ability to group devices into different management domains ADOM to further simplify multi-device security deployment and management...