239 matches found
N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...
CVE-2026-86102
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...
CVE-2026-101891
An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...
CVE-2026-86102 WatchGuard AP Command Injection in Internal Management API Allows Command Execution
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...
EUVD-2026-88364
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...
EUVD-2026-88362
An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...
CVE-2026-86102 WatchGuard AP Command Injection in Internal Management API Allows Command Execution
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...
CVE-2026-86102
The WatchGuard AP is affected by an OS command injection vulnerability within its internal API service . An attacker with network access to the AP can exploit this flaw to execute arbitrary shell commands on the underlying operating system. The vulnerability is assigned a CRITICAL base severity s...
CVE-2026-101891: Improper Access Control
An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network access to the AP to obtain a valid API session...
CVE-2026-86102: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary shell commands on the underlying operating system...
CVE-2025-9074
描述 Vibe 编写了一个纯 Bash 的小型漏洞利用脚本，不依赖可能未安装的工具。该脚本与内部 Docker API 通信，创建并启动一个新容器，挂载宿主机 C 盘，然后在其中执行命令。输出会流式传回控制台。容器随后会被删除。 用法 ./exploit.sh "whoami"...
-CVE-2024-45352
🚨 CVE-2024-45352 – Ejecución Remota de Código RCE en Xiaomi Smarthome 📌 Resumen Se descubrió una vulnerabilidad crítica CVE-2024-45352 en la aplicación Xiaomi Smarthome, que permite la ejecución remota de código RCE sin autenticación mediante un manejo inadecuado de la entrada en el analizador de...
CVE-2026-86206
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4...
EUVD-2026-72023
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4...
CVE-2026-86206: Incomplete Filtering of Special Elements
A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4...
PT-2026-86447
Name of the Vulnerable Software and Affected Versions N-central versions prior to 2026.3 HF3 N-central versions prior to 2026.4 Description An issue in the internal API access control filter allows unauthorized access to internal APIs. Recommendations Update to version 2026.3 HF3. Update to versi...
PT-2026-86448
🚨 CVE-2026-86207 - critical 🚨 N-able N-central - Authentication Bypass An authentication bypass in N-central 2026.3 HF 3 leads to authentication bypass in... 👾 https://t.co/BDWCBNCGsg @pdnuclei NucleiTemplates cve...
MAL-2026-15833 Malicious code in apple-cktool-internal-api-v9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3faeeff2b18d0a2f9f9a5d8d9543b6d950f49c64f6313b37fc02bc68aa9fd9d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in apple-cktool-internal-api-v9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3faeeff2b18d0a2f9f9a5d8d9543b6d950f49c64f6313b37fc02bc68aa9fd9d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...