159988 matches found
EUVD-2026-97511
A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Rendering. Performing a manipulation of the argument alignment results in improper restriction of rendered ui layers. The attack ca...
SUSE-SU-2026:4626-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2026-77050: potential denial-of-service in getsupportedlanguagevariant when processing many distinct, very long language codes bsc1284481. - CVE-2026-84429: potential denial-of-service attack due to quadratic time complexity when...
Security update for python-Django
This update for python-Django fixes the following issues: CVE-2026-77050: potential denial-of-service in getsupportedlanguagevariant when processing many distinct, very long language codes bsc1284481. CVE-2026-84429: potential denial-of-service attack due to quadratic time complexity when parsing...
CVE-2026-109175
MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to list other administrators' network-disk files via POST /networkDisk/getFileList. Attackers can query the endpoint, which filters only by status, file type, or filePath and...
CVE-2026-108950
Open Source Social Network OSSN through 10.1 contains a missing authorization vulnerability in ossnalbumpagehandler that allows unauthenticated attackers to download files via album/getphoto and album/getcover. Attackers can enumerate sequential file GUIDs to retrieve friends-only album photos an...
EUVD-2026-97381
MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or rename other administrators' network-disk files by supplying their file paths. Attackers can send crafted requests to POST /networkDisk/moveFile, batchMoveFile, or edit, which...
CVE-2026-109175
MoguBlog versions through 6.2 are affected by an insecure direct object reference vulnerability in the /networkDisk/getFileList endpoint. Authenticated administrators can list network-disk files belonging to other administrators because the system filters by status, file type, or filePath but fai...
EUVD-2026-97379
MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to list other administrators' network-disk files via POST /networkDisk/getFileList. Attackers can query the endpoint, which filters only by status, file type, or filePath and...
CVE-2026-108950 Open Source Social Network (OSSN) through 10.1 Missing Authorization via Album Photo Routes
Open Source Social Network OSSN through 10.1 contains a missing authorization vulnerability in ossnalbumpagehandler that allows unauthenticated attackers to download files via album/getphoto and album/getcover. Attackers can enumerate sequential file GUIDs to retrieve friends-only album photos an...
EUVD-2026-97357
Open Source Social Network OSSN through 10.1 contains a missing authorization vulnerability in ossnalbumpagehandler that allows unauthenticated attackers to download files via album/getphoto and album/getcover. Attackers can enumerate sequential file GUIDs to retrieve friends-only album photos an...
CVE-2026-108950 Open Source Social Network (OSSN) through 10.1 Missing Authorization via Album Photo Routes
Open Source Social Network OSSN through 10.1 contains a missing authorization vulnerability in ossnalbumpagehandler that allows unauthenticated attackers to download files via album/getphoto and album/getcover. Attackers can enumerate sequential file GUIDs to retrieve friends-only album photos an...
CVE-2026-108950
The Open Source Social Network (OSSN) version through 10.1 is vulnerable to a missing authorization flaw in the ossn_album_page_handler component. This security weakness allows unauthenticated attackers to bypass access controls and download private files, such as friends-only album photos and ot...
CVE-2026-107203
An incorrect authorization flaw has been found in network interface handling in the Foreman package. The domain and subnet interface API checks only that the caller holds a host permission. It does not apply the search limit on that permission, so the request is answered from every interface on t...
EUVD-2026-97236
An incorrect authorization flaw has been found in network interface handling in the Foreman package. The domain and subnet interface API checks only that the caller holds a host permission. It does not apply the search limit on that permission, so the request is answered from every interface on t...
CVE-2026-107203
The Foreman package contains an incorrect authorization flaw in its network interface handling . The domain and subnet interface API fails to apply search limits on host permissions, allowing a low-privileged network attacker to view interface records for hosts they are not authorized to access. ...
CVE-2026-107203 Foreman: domain and subnet interface api skips host search filters
An incorrect authorization flaw has been found in network interface handling in the Foreman package. The domain and subnet interface API checks only that the caller holds a host permission. It does not apply the search limit on that permission, so the request is answered from every interface on t...
CVE-2026-107193
A flaw exists in the permission filters of the foreman package. The API loads a filter via its identifier but fails to apply the search limit corresponding to the caller's permissions. A low-privileged network attacker or user who is authorized to delete filters for only one role can exploit this...
CVE-2026-107203
An incorrect authorization flaw has been found in network interface handling in the Foreman package. The domain and subnet interface API checks only that the caller holds a host permission. It does not apply the search limit on that permission, so the request is answered from every interface on t...
goscan
GoScan es un cliente interactivo de escaneo de redes, con autocompletado, que proporciona abstracción y automatización sobre nmap. Aunque comenzó como un pequeño proyecto paralelo que desarrollé para aprender @golang, GoScan ahora se puede usar para realizar descubrimiento de hosts, escaneo de...
eternal_scanner
ETERNAL SCANNER 2.4 Eternal scanner es un escáner de red para el exploit Eternal Blue CVE-2017-0144 y Eternal Romance tubería con nombre CVE-2017-0145 . Capturas de pantalla Versión 2.2 Nuevas implementaciones Verificación de vulnerabilidad Eternal Romance escan -er Resultados divididos de la bas...