61 matches found
Apache Lounge Privilege Escalation
The vulnerability of the Apache Lounge web server distribution relates to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
Exploit for CVE-2026-89282
CVE-2026-89282: Apache Lounge Windows — DLL Search Order Hijac...
Apache Lounge Windows 2.4.68 DLL Hijacking
Apache Lounge Windows versions before 2.4.68-260920 contain insecure installation directory permissions. The supplied proof of concept demonstrates local privilege escalation by planting a proxy VCRUNTIME140.dll that executes when the Apache service restarts. https://packetstorm.news/download/236...
CVE-2026-89281
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...
CVE-2026-89281 CVE-2026-89281
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...
EUVD-2026-84681
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...
CVE-2026-89281
The Apache Lounge Windows distribution of Apache HTTP Server build is affected by a hardcoded configuration path vulnerability specifically within the openssl.cnf path. This security flaw can lead to local code execution . No specific remediation, exploit links, or versions are provided in the do...
PT-2026-97014
Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The Apache Lounge Windows distribution of Apache HTTP Server contains a hardcoded configuration path within the openssl.cnf path. This flaw can allow a local attacker to achieve co...
CVE-2026-89281: Incorrect Permission Assignment for Critical Resource
The Apache Lounge Windows distribution of Apache HTTP Server build contains a hardcoded configuration path vulnerability within openssl.cnf path that can allow local code execution...
CVE-2026-89282: Incorrect Permission Assignment for Critical Resource
The Apache Lounge Windows distribution of Apache HTTP Server build contains an insecure installation directory permissions vulnerability through its default install directory on C:, which inherits write access for Authenticated Users...
PT-2026-97015
Name of the Vulnerable Software and Affected Versions Apache Lounge Windows distribution of Apache HTTP Server affected versions not specified Description This issue involves insecure installation directory permissions within the default install directory on C:. The directory inherits write acces...
PT-2026-121195
Уязвимость дистрибутива Apache Lounge веб-сервера Apache HTTP Server связана с неправильным присвоением разрешений для критичного ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...
MAL-2025-25612 Malicious code in lounge-theme-amoled (npm)
The package lounge-theme-amoled was found to contain malicious code...
Malicious code in lounge-theme-amoled (npm)
The package lounge-theme-amoled was found to contain malicious code...
CVE-2021-43171
Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user's systems by altering the server's API response...
frankfurtfashionlounge.de Cross Site Scripting vulnerability OBB-3916622
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
lounge-about.com Improper Access Control vulnerability OBB-3804049
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
hair-lounge-with.com Improper Access Control vulnerability OBB-3800861
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
