CVE-2026-21758 HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by an information disclosure vulnerability, which could lead to an attacker gathering sensitive information about the host environment...

CVE-2026-21758

HCL Hive is affected by an information disclosure vulnerability that could allow an attacker to gather sensitive information about the host environment . The CVSS v3.1 score is 3.7 (LOW) , with a network attack vector, high attack complexity , no required privileges, and low confidentiality impac...

CVE-2023-23752-Python

CVE-2023-23752-Python root@kitploit: usage: CVE-2023-23752.py -h url Joomla! 4.2.8 - Unauthenticated information disclosure positional arguments: url Root URL base path including HTTP scheme, port, and root folder options: -h, --help show this help message and exit...

CVE-2019-8627

CVE-2019-8627 una perdita di informazioni del kernel su macOS= 10.14.4 =============================== Come riprodurre: 1. attiva il firewall 2. esegui la prova di concetto come root 3. scollega la rete Belkin USB-C LAN e poi ricollega la rete Belkin USB-C LAN. dopo queste operazioni otterrai i...

wordpress-jetpack-broken-access-control-vulnerable-application

wordpress-jetpack-broken-access-control-vulnerable-application Questa è un'applicazione vulnerabile per testare l'exploit per il controllo di accesso non corretto broken access control di Jetpack 13.9.1 CVE-2024-9926. ATTENZIONE! Questa applicazione contiene serie vulnerabilità di sicurezza...

CVE-2026-77136

creationtimestamp| type| source ---|---|--- 2026-08-25 10:07:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtvl4jgnnx25 2026-08-25 10:28:13+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtvmbpb3su2y 2026-08-25 20:50:07+00:00| seen|...

CVE-2025-11203-PoC

CVE-2025-11203 — Divulgação de Informações de APIKEY no Endpoint de Saúde do LiteLLM LiteLLM versões 1.63.14, o endpoint /health, ao processar o parâmetro apikey, não filtra corretamente informações sensíveis , permitindo que usuários autenticados obtenham as chaves de API armazenadas nas...

CVE-2026-56136

A flaw was found in NTFS-3G. An out-of-bounds read vulnerability exists that allows a remote attacker to read potentially confidential information within an ntfs-3g process. This can be triggered by crafting a malicious NTFS image and creating a file with a specially crafted name. Mitigation To...

CVE-2021-42913

CVE-2021-42913 Samsung Printer SCX-6X55X Controllo di accesso improprio La serie Samsung Printer SCX-6x55X SyncThru Web Service è affetta da una vulnerabilità di controllo di accesso improprio. La vulnerabilità può permettere a un attaccante di ottenere l'accesso a un elenco di utenti e password...

CVE-2026-19542

A flaw was found in glibc. An out-of-bounds array write vulnerability exists within the tdelete function. This issue occurs due to incorrect management of array sizes, which can lead to memory corruption. A local attacker with low privileges could potentially exploit this to cause a denial of...

CVE-2019-19653

CVE-2019-19653 Divulgazione di informazioni di Chevereto = 3.13.5 Core. I file di log per l'importatore di massa sono disponibili per chiunque e sono facilmente enumerabili root@kitploit: /app/importer/jobs/9/process.txt /app/importer/jobs/9/errors.txt...

CVE-2026-77128

The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the disableOverrideDemand plugin setting is active. Exploitation of this issue requires on...

CVE-2026-77131

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key...

CVE-2026-77127

The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses the current databa...

CVE-2026-56096

The extension passes the user-supplied search query parameter to Apache Solr without restricting advanced Solr query syntax such as wildcards, field selectors and range queries. A remote, unauthenticated attacker can use this syntax to enumerate indexed field names and extract their stored values...

CVE-2026-56093

The extension's frontend detail-view document lookup does not apply the current site's siteHash filter or frontend user access filter, unlike the regular search path. A visitor who can obtain or guess a valid Solr document id can retrieve documents through this lookup without the same access...

CVE-2026-17548

Missing authorization in Checkmk 2.5.0p12, 2.4.0p36, 2.3.0p50 and all 2.2.0 versions allows an authenticated user who knows the ID of a background job to view that job's status and results...

CVE-2026-56094 Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash filter is applied, and the query builder does not overwrite an already-registered named filter. In a shared Solr core serving multiple TYPO3 sites, a visitor ca...

EUVD-2026-65351

The extension allows a request-provided additionalFilters parameter to register a named siteHash filter before the system's own siteHash filter is applied, and the query builder does not overwrite an already-registered named filter. In a shared Solr core serving multiple TYPO3 sites, a visitor ca...

CVE-2026-56094

TYPO3 extension "Apache Solr for TYPO3 - Enterprise Search" (solr) is affected by an information disclosure vulnerability. The extension's additionalFilters request parameter allows an attacker to register a named siteHash filter before the system's own filter is applied; because the query builde...