CVE-2023-35793-CSRF-On-Web-SSH

CVE-2023-35793-CSRF-On-Web-SSH Repository contains description for CVE-2023-35793 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-35793 Vendor: Cassia Networks Product: Access Controller Version: Cassia-AC-2.1.1.2303271039 Vulnerability: Cross Site Request Forgery...

UBUNTU-CVE-2026-99059

In the Linux kernel, the following vulnerability has been resolved: wireguard: noise: reject response consumption after intermediate initiation Two threads begin processing the identical response message, received twice. The first thread, A, runs. While it's running, the second one, B, gets partw...

CVE-2026-53989

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attacker-controlled sites by injecting an unvalidated redirect query parameter. Attackers can craft a malicious link...

CVE-2026-53989 Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attacker-controlled sites by injecting an unvalidated redirect query parameter. Attackers can craft a malicious link...

EUVD-2026-89371

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attacker-controlled sites by injecting an unvalidated redirect query parameter. Attackers can craft a malicious link...

CVE-2026-53989 Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attacker-controlled sites by injecting an unvalidated redirect query parameter. Attackers can craft a malicious link...

CVE-2026-53989 Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attacker-controlled sites by injecting an unvalidated redirect query parameter. Attackers can craft a malicious link...

CVE-2026-53989

Dockhand versions prior to 1.0.36 are vulnerable to an open redirect in the OIDC initiation endpoint. This flaw allows unauthenticated remote attackers to inject an unvalidated redirect query parameter, forcing authenticated users to navigate to attacker-controlled sites. By targeting the OIDC ca...

PT-2026-102864

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attacker-controlled sites by injecting an unvalidated redirect query parameter. Attackers can craft a malicious link...

CVE-2026-53989: URL Redirection to Untrusted Site

Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attacker-controlled sites by injecting an unvalidated redirect query parameter. Attackers can craft a malicious link...

CVE-2026-21113

Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission...

CVE-2026-21113

Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission...

CVE-2026-21113

CVE-2026-21113 is an improper export of Android application components in Samsung VisualVoicemail prior to version 20.1.00.05 . The flaw allows local attackers with low privileges to initiate a call without proper permission , resulting in low impacts to confidentiality, integrity, and availabili...

EUVD-2026-74654

Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission...

PT-2026-88847

Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission...

CVE-2026-21113: Improper Export of Android Application Components

Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission...

CVE-2026-20281: Missing Release of Memory after Effective Lifetime

A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that are running Cisco Session Initiation Protocol SIP Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This...

WordPress Eupago Gateway For Woocommerce plugin < 4.7.2 - Unauthenticated Arbitrary Refund Initiation vulnerability

Unauthenticated Arbitrary Refund Initiation vulnerability discovered by Pedro Pinho in WordPress Plugin Eupago Gateway For Woocommerce versions 4.7.2...

CVE-2026-16137: Improper Limitation of a Pathname to a Restricted Directory

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

Linux Distros Unpatched Vulnerability : CVE-2026-45103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer parses the...