CVE-2023-27524

CVE-2023-27524: تجاوز مصادقة Apache Superset نص برمجي للتحقق مما إذا كان خادم Apache Superset يعمل بتكوين افتراضي غير آمن CVE-2023-27524. يتحقق النص البرمجي مما إذا كانت كوكيز جلسة خادم Superset موقّعة بأي من مفاتيح Flask SECRETKEY الافتراضية المعروفة. يمكن استخدام الخيار --validate للتحقق من...

osCommerce 2.3.4.1 - Remote Code Execution

osCommerce Online Merchant 2.3.4.1 contains a remote code execution caused by insecure default configuration and missing authentication in the installer workflow, letting unauthenticated attackers execute arbitrary PHP code via install4.php, exploit requires accessible /install/ directory after...

firebaseExploiter

Scanner et Exploit Firebase CLI non sécurisé. Fonctionnalités • Installation • Utilisation Fonctionnalités Analyse de vulnérabilité en masse à partir d'une liste d'hôtes Données JSON personnalisées dans exploit.json à téléverser lors de l'exploitation Chemin d'URI personnalisé pour l'exploitation...

sjet

sJET بواسطة siberas مجموعة أدوات استغلال JMX من siberas تتيح sJET استغلالًا سهلاً لخدمات JMX غير الآمنة المُهيأة. يمكن العثور على معلومات خلفية إضافية هنا وهنا. المتطلبات الأساسية Jython 2.7 الاستخدام تنفذ sJET واجهة سطر أوامر باستخدام argparse: jython sjet.py targetHost targetPort password MODE...

CVE-2023-27524-POC

CVE-2023-27524: تجاوز المصادقة في Apache Superset نص برمجي للتحقق مما إذا كان خادم Apache Superset معرضًا للثغرة CVE-2023-27524، وفي حال كان معرضًا، يتم تزوير كوكي جلسة باستخدام userid = 1 والذي عادةً ما يكون المستخدم admin، مما يتيح تجاوز المصادقة والوصول إلى لوحة التحكم. حاليًا، هناك حوالي 3000...

CentOS Linux 8.4 [TuxCare] Security Update: perl-HTTP-Tiny (CENTOS8.4:CLSA-2025:1758821123)

The CentOS Linux 8.4 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1758821123 advisory. - HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where...

tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations

A flaw was found in Apache Tomcat. Insufficient technical documentation regarding the secure configuration of the EncryptInterceptor component may lead to deployments with insecure settings. This vulnerability could allow an attacker to exploit misconfigurations that arise from unclear guidance,...

tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations

A flaw was found in Apache Tomcat. Insufficient technical documentation regarding the secure configuration of the EncryptInterceptor component may lead to deployments with insecure settings. This vulnerability could allow an attacker to exploit misconfigurations that arise from unclear guidance,...

tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations

A flaw was found in Apache Tomcat. Insufficient technical documentation regarding the secure configuration of the EncryptInterceptor component may lead to deployments with insecure settings. This vulnerability could allow an attacker to exploit misconfigurations that arise from unclear guidance,...

CVE-2026-86464

In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager IdM deployment included insecure default configurations and credentials for security-sensitive services. The Helm chart exposed the Keycloak service and its PostgreSQL...

CVE-2026-58400 GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the Saxon XSLT processor used to render formatters is configured without secure processing FEATURESECUREPROCESSING and without disabling Java extension functions...

VulnCheck KEV: CVE-2026-58400

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.12 and 4.2.17, the Saxon XSLT processor used to render formatters is configured without secure processing FEATURESECUREPROCESSING and without disabling Java extension functions...

CVE-2026-82955

In the current development version of Eclipse aeriOS, which has not yet had an official release, the KrakenD instance included in the API Gateway component had the disablejwksecurity parameter hard-coded to true, with no option to override it through the Helm chart configuration. This setting...

CVE-2026-84835

Missing Authorization vulnerability in DimaFreund Rentsyst rentsyst allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rentsyst: from n/a through 2.1.5...

EUVD-2026-67029

The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endpoint option into the user profile without passing it through createSafeUrl in src/config.ts, the helper that already restricted...

CVE-2026-21784 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible to unauthorized external interaction and potential exploitation...

CVE-2026-76244 stigmem-node Insecure Federation Transport Configuration

stigmem-node contains an insecure default configuration vulnerability that allows federation traffic to traverse networks without mTLS protection when non-loopback endpoints are enabled. Operators who explicitly disabled mTLS while binding federation to non-loopback addresses expose federation...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

CVE-2026-44094: Not Failing Securely

An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted...

CVE-2026-62415

The Membership Pro Joomla extension (prior to version 4.6.2 ) is vulnerable to an insecure default configuration . By default, the extension allows unauthenticated users to upload media assets . Exploitation details and specific in-the-wild examples are not provided in the documents. Remediation ...