CVE-2026-79669 Ech0 before 4.4.3 Missing Authorization on System Logs

Ech0 before 4.4.3 lacks authorization checks on system log endpoints allowing any authenticated non-admin user to read and stream all server logs. Attackers can access historical logs and real-time log streams via GET /api/system/logs, GET /api/system/logs/stream, and WS /ws/system/logs to gather...

CVE-2026-79669 Ech0 before 4.4.3 Missing Authorization on System Logs

Ech0 before 4.4.3 lacks authorization checks on system log endpoints allowing any authenticated non-admin user to read and stream all server logs. Attackers can access historical logs and real-time log streams via GET /api/system/logs, GET /api/system/logs/stream, and WS /ws/system/logs to gather...

CVE-2026-79666

Ech0 versions before 4.4.3 fail to enforce administrator authorization on dashboard log endpoints. Any authenticated user can query GET /api/system/logs and subscribe to SSE and WebSocket log streams, retrieving sensitive operational data including file paths, stack traces, and internal URLs . Th...

CVE-2026-79666 Ech0 before 4.4.3 Missing Authorization via dashboard log endpoints

Ech0 before 4.4.3 fails to enforce administrator authorization on dashboard log endpoints, allowing any authenticated user to access system logs. Attackers with valid user sessions can query GET /api/system/logs and subscribe to SSE and WebSocket log streams to retrieve sensitive operational data...

EUVD-2026-65448

Ech0 before 4.4.3 fails to enforce administrator authorization on dashboard log endpoints, allowing any authenticated user to access system logs. Attackers with valid user sessions can query GET /api/system/logs and subscribe to SSE and WebSocket log streams to retrieve sensitive operational data...

CVE-2026-79660

Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model . Unauthenticated attackers can harvest all commenter emails by calling the /api/comments and /api/comments/public endpoints without any auth...

EUVD-2026-65454

Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model. Unauthenticated attackers can harvest all commenter emails by calling the /api/comments and /api/comments/public endpoints without...

CVE-2026-21758

HCL Hive is affected by an information disclosure vulnerability, which could lead to an attacker gathering sensitive information about the host environment...

cve-2021-21735-zte-zxhn-h168n-admin-compromise

CVE-2021-21735: ZTE ZXHN H168N Informationsleck bis zur vollständigen Administratorübernahme Technische Fallstudie und für GitHub Pages bereite Ausarbeitung zu CVE-2021-21735 im ZTE ZXHN H168N V3.5. Dieses Repository konzentriert sich auf den Firmware-Routing-Fehler hinter den offengelegten...

MegaHiDocker

MegaHiDocker Questo progetto verrà sfruttato per alcuni container docker con codice di vulnerabilità simile: CVE-2020-35191, ma questa volta su altri container. = Si prega di leggere il file Description.txt Requisiti: 1.È necessario installare docker nel tuo Linux e installare il modulo subproces...

EUVD-2026-65471

HCL Hive is affected by an information disclosure vulnerability, which could lead to an attacker gathering sensitive information about the host environment...

CVE-2026-21758 HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by an information disclosure vulnerability, which could lead to an attacker gathering sensitive information about the host environment...

CVE-2026-21758

HCL Hive is affected by an information disclosure vulnerability that could allow an attacker to gather sensitive information about the host environment . The CVSS v3.1 score is 3.7 (LOW) , with a network attack vector, high attack complexity , no required privileges, and low confidentiality impac...

CVE-2023-23752-Python

CVE-2023-23752-Python root@kitploit: usage: CVE-2023-23752.py -h url Joomla! 4.2.8 - Unauthenticated information disclosure positional arguments: url Root URL base path including HTTP scheme, port, and root folder options: -h, --help show this help message and exit...

CVE-2019-8627

CVE-2019-8627 una perdita di informazioni del kernel su macOS= 10.14.4 =============================== Come riprodurre: 1. attiva il firewall 2. esegui la prova di concetto come root 3. scollega la rete Belkin USB-C LAN e poi ricollega la rete Belkin USB-C LAN. dopo queste operazioni otterrai i...

wordpress-jetpack-broken-access-control-vulnerable-application

wordpress-jetpack-broken-access-control-vulnerable-application Questa è un'applicazione vulnerabile per testare l'exploit per il controllo di accesso non corretto broken access control di Jetpack 13.9.1 CVE-2024-9926. ATTENZIONE! Questa applicazione contiene serie vulnerabilità di sicurezza...

CVE-2026-77136

creationtimestamp| type| source ---|---|--- 2026-08-25 10:07:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtvl4jgnnx25 2026-08-25 10:28:13+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtvmbpb3su2y 2026-08-25 20:50:07+00:00| seen|...

CVE-2025-11203-PoC

CVE-2025-11203 — Divulgação de Informações de APIKEY no Endpoint de Saúde do LiteLLM LiteLLM versões 1.63.14, o endpoint /health, ao processar o parâmetro apikey, não filtra corretamente informações sensíveis , permitindo que usuários autenticados obtenham as chaves de API armazenadas nas...

CVE-2026-56136

A flaw was found in NTFS-3G. An out-of-bounds read vulnerability exists that allows a remote attacker to read potentially confidential information within an ntfs-3g process. This can be triggered by crafting a malicious NTFS image and creating a file with a specially crafted name. Mitigation To...

CVE-2021-42913

CVE-2021-42913 Samsung Printer SCX-6X55X Controllo di accesso improprio La serie Samsung Printer SCX-6x55X SyncThru Web Service è affetta da una vulnerabilità di controllo di accesso improprio. La vulnerabilità può permettere a un attaccante di ottenere l'accesso a un elenco di utenti e password...