EUVD-2026-65344

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key...

CVE-2026-77131 Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key...

CVE-2026-77135 Information Disclosure in extension "femanager" (femanager)

The extension's user detail view fails to verify that a requested user record matches the configured or logged-in target, allowing any visitor with access to the Detail or List plugin to retrieve another frontend user's profile data, including name, email, date of birth and address, by supplying ...

CVE-2026-77135

CVE-2026-77135 is an information disclosure vulnerability in the TYPO3 extension femanager . The extension's user detail view fails to verify that a requested user record matches the configured or logged-in target, allowing any visitor with access to the Detail or List plugin to retrieve another ...

TYPO3-EXT-SA-2026-025: Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025...

TYPO3-EXT-SA-2026-024: Information Disclosure in extension "femanager" (femanager)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-024...

TYPO3-EXT-SA-2026-016: Information Disclosure in extension "Modules" (modules)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-016...

TYPO3-EXT-SA-2026-025: Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025...

TYPO3-EXT-SA-2026-015: Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-015...

CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py é um script Python projetado para detectar vulnerabilidades específicas em instâncias ServiceNow e extrair detalhes de conexão do banco de dados se a vulnerabilidade for encontrada. Esta ferramenta é particularmente útil para pesquisadores de segurança e testadores ...

CVE-2026-10582

A flaw was found in Hugo. The security.http.urls allowlist, which controls outbound fetches, does not adequately validate the destination address of URLs. This vulnerability allows a remote attacker to supply a specially crafted URL that resolves to internal network resources. As a result, the Hu...

CVE-2026-17548

Checkmk , a network monitoring platform, suffers from a missing authorization flaw that allows an authenticated user who knows the ID of a background job to view that job's status and results. The vulnerability affects versions <2.5.0p12, <2.4.0p36,

EUVD-2026-65327

Missing authorization in Checkmk 2.5.0p12, 2.4.0p36, 2.3.0p50 and all 2.2.0 versions allows an authenticated user who knows the ID of a background job to view that job's status and results...

CVE-2019-1653

CVE-2019-1653 Uma vulnerabilidade na interface de gerenciamento baseada na web dos roteadores VPN WAN Dual Gigabit Cisco Small Business RV320 e RV325 pode permitir que um atacante remoto não autenticado obtenha informações sensíveis. Este simples script Python é uma automação de exploit para o...

CVE-2023-23752

CVE-2023-23752 Joomla! v4.2.8 - Divulgazione di informazioni non autenticata Per eseguire questo script, dobbiamo installare alcune gemme mancanti: root@kitploit: sudo gem install httpx sudo gem install docopt sudo gem install paint root@kitploit: ruby exploit.rb http://dev.devvortex.htb...

CVE-2023-28432_docker

CVE-2023-28432docker Ambienti di test per CVE-2023-28432, divulgazione di informazioni nei cluster MinIO. Le directory forniscono diverse versioni / configurazioni per un cluster MinIO:...

webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing maliciously crafted web content can disclose sensitive user information due to a path handling issue that was addressed with improved validation...

webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information

A flaw was found in WebKitGTK. Processing maliciously crafted web content can disclose sensitive user information due to a path handling issue that was addressed with improved validation...

webkitgtk: webkitgtk: Visiting a website may leak sensitive data

A flaw was found in WebKitGTK. Visiting a website can leak sensitive data due to a permissions issue that was addressed with additional restrictions...

[SECURITY] [DLA 4754-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4754-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 25, 2026 https://wiki.debian.org/LTS -...