CVE-2020-35590

Información del exploit Título del exploit: Plugin de WordPress Limit Login Attempts Reloaded 2.13.0 - Bypass del límite de inicio de sesión CVE: CVE-2020-35590 Fecha: 2020-06-09 Autor del exploit: N4nj0 Enlace del software: https://wordpress.org/plugins/limit-login-attempts-reloaded/ Versión:...

CVE-2021-41773

CVE-2021-41773 Apacheパストラバーサル用の脆弱なDockerイメージ この脆弱性は、特定の非デフォルト設定を持つバージョン2.4.49 のみ に適用されます。状況によっては、ファイル読み取りまたはコード実行につながる可能性があります。 https://twitter.com/ptswarm/status/1445376079548624899 脆弱なファイル読み取り設定 コンテナはDocker Hubから直接プルできます。 docker pull blueteamsteve/cve-2021-41773:no-cgid 以下のコマンドで実行します。 docker ru...

CVE-2019-0232

CVE-2019-0232 漏洞利用 CGI Servlet 远程代码执行 RCE – Windows上的Apache Tomcat 参考 : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ root@kitploit: Apache Tomcat在CGI...

CVE-2026-19723

The Social Media Share Buttons & Social Sharing Icons WordPress plugin (before 3.0.1 ) contains a Reflected Cross-Site Scripting vulnerability via the Pin It Share Handler . The root cause is a failure to properly escape a value taken from the incoming request before outputting it in an inline Ja...

CVE-2021-41773S

CVE-2021-41773 Apache 路径遍历漏洞的易受攻击 Docker 镜像 该漏洞 仅 适用于具有特定非默认配置的 2.4.49 版本。在某些情况下，这可能导致文件读取或代码执行。 https://twitter.com/ptswarm/status/1445376079548624899 可造成文件读取的漏洞配置 可直接从 Docker Hub 拉取容器 docker pull blueteamsteve/cve-2021-41773:no-cgid 并使用以下命令执行 docker run -dit -p 8080:80...

CVE-2026-19796

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsddisplstyle' Parameter in all versions up to, and including, 5.8.1 due to insufficient input sanitization and output escaping. This makes it possible f...

Astra Linux – Vulnerability in OpenSSL

Issue Summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions. Impact Summary: Attackers may exploit certain server configurations to trigger unbounded memory growth, leading to a Denial of Service attack. This issue can occur in...

Astra Linux – Vulnerability in OpenSSH

In OpenSSH 6.2 through 8.x, prior to version 8.8, when certain non-default configurations were used, privilege escalation could occur because supplementary groups were not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand might run with privileges...

Astra Linux – Vulnerability in OpenSSL

Applications that use non-default options when verifying certificates may be vulnerable to attacks from a malicious Certificate Authority CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL, and other certificate policy checks for tho...

CVE-2026-55400

CVE-2026-55400 describes an integer underflow in Secure Access servers prior to 14.57. With an authenticated session, an attacker can send specially crafted traffic to a server in a non-default configuration, causing a persistent denial of service. Affected product/version: Secure Access servers

CVE-2026-66774

SAP Approuter in SAP Business AI Platform contains multiple vulnerabilities related to error handling under non-default configurations. An attacker with low privileges could exploit conditions outside their control to affect availability , with no impact on confidentiality or integrity reported. ...

EUVD-2026-55886

SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this under a non-default configuration. Successful exploitation is highly complex, as it depends on conditions outside the attacker's control. This could result in a low impact on...

rclone: Local Encoding Path Traversal

Summary The local backend relies on its configurable filename encoder to prevent remote filename data from becoming operating-system path syntax. If a local destination uses an encoding that omits Dot, such as Slash, None, or Raw, a remote object's standard-encoded ．． component is decoded into an...

Linux Distros Unpatched Vulnerability : CVE-2026-71192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests whe...

CVE-2026-16296 Clearfy < 2.4.3 - Open Redirect via Cyrlitera 404 Handler

The Clearfy Cache WordPress plugin before 2.4.3 does not validate the redirect target in its Cyrlitera old-URL redirect handler, passing a decoded request URI to an unsafe redirect function, which allows unauthenticated attackers to redirect visitors to an arbitrary external URL when a non-defaul...

EUVD-2026-52598

The Clearfy Cache WordPress plugin before 2.4.3 does not validate the redirect target in its Cyrlitera old-URL redirect handler, passing a decoded request URI to an unsafe redirect function, which allows unauthenticated attackers to redirect visitors to an arbitrary external URL when a non-defaul...

EUVD-2026-51717

The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after user registration to the newly created account, allowing unauthenticated attackers to obtain an authenticated session for an arbitrary existing user, including administrators, on...

CVE-2026-15368

The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after user registration to the newly created account, allowing unauthenticated attackers to obtain an authenticated session for an arbitrary existing user, including administrators, on...

CVE-2026-15368 Profile Builder < 3.16.4 - Unauthenticated Account Takeover via Auto-Login After Registration

The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after user registration to the newly created account, allowing unauthenticated attackers to obtain an authenticated session for an arbitrary existing user, including administrators, on...

EUVD-2026-47789

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default...