sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

BRIntelcollector

BRIntelcollector Overview The BRIntelcollector is a Cyber Threat Intelligence CTI tool focused on Brazilian national threat indicators. The tool allows searching and consolidating information about cyber threats through multiple intelligence sources, facilitating the creation of a centralized...

CVE-2026-18535

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of Service (ReDoS) attack and improper neutralisation of wildcard query operators . The underlying cause is linked to inefficient regular expression complexity (CWE-1333...

EUVD-2026-118926

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of Service ReDoS attack and to improper neutralisation of wildcard query operators...

CVE-2026-19124

IBM API Connect versions 10.0.8.0 through 10.0.8.12 are vulnerable to the decryption of sensitive credentials. The root cause is the use of a hard-coded cryptographic key built into the product to protect stored data. An attacker who obtains access to this stored data can use the hard-coded key t...

EUVD-2026-118925

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow an attacker with access to stored data to decrypt sensitive credentials due to the use of a hard-coded cryptographic key. The key protecting stored credentials is built into the product, so credentials could be decrypted if the stored data is...

EUVD-2026-118924

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a local attacker to obtain sensitive information due to the use of a cryptographically weak pseudo-random number generator...

CVE-2026-17393

IBM API Connect versions 10.0.8.0 through 10.0.8.12 are affected by a vulnerability that allows a local attacker to obtain sensitive information . The root cause is the use of a cryptographically weak pseudo-random number generator (CWE-338). While the impact on confidentiality is high, the attac...

EUVD-2026-118923

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a remote attacker to gain full administrative control due to the use of a cryptographically weak pseudo-random number generator...

CVE-2026-17386

IBM API Connect versions 10.0.8.0 through 10.0.8.12 are susceptible to a vulnerability where a remote attacker could gain full administrative control . The root cause is the use of a cryptographically weak pseudo-random number generator (CWE-338). The CVSS 3.1 score is 8.1 (High) , reflecting hig...

CVE-2026-17384

IBM API Connect versions 10.0.8.0 through 10.0.8.12 are vulnerable to a server-side request forgery (SSRF) vulnerability (CWE-918 ). A remote authenticated attacker could exploit this flaw to obtain sensitive information. IBM recommends upgrading to version 10.0.8.13 to address this and other mul...

EUVD-2026-118922

IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery vulnerability...

CVE-2026-75590

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to server-side request forgery (SSRF) . An attacker can bypass protections intended to block requests to internal addresses, forcing the server to contact internal services and return portions of their responses. This could lead to...

EUVD-2026-118802

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to access internal network resources and obtain sensitive information due to server-side request forgery. A protection that blocks requests to internal addresses can be bypassed, so the server could be made to contact interna...

CVE-2026-19131

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are susceptible to multiple vulnerabilities where low-privileged users can query arbitrary indices. This issue stems from missing authorization , potentially allowing attackers to read sensitive data . No specific exploit information or remediati...

EUVD-2026-118801

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow low-privileged users to query arbitrary indices and read sensitive data due to missing authorization...

CVE-2026-19129

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a flaw where the identity of the backup server is not verified when establishing secure connections for analytics backups. This improper certificate validation (CWE-295) allows a network-positioned...

EUVD-2026-118800

IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a network-positioned attacker to intercept backup data due to improper verification of the backup server's identity. The identity of the backup server is not verified when the secure connection for analytics...

EUVD-2026-118799

IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send unauthorized requests from the system due to server-side request forgery. This could be used to enumerate network resources or to support further attacks...

CVE-2026-19128

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are affected by multiple vulnerabilities that could allow an authenticated attacker to perform server-side request forgery (SSRF) . This flaw enables the attacker to send unauthorized requests from the system, which can be leveraged to enumerate ...