Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Vulnerabilities found in IBM Db2 LUW that affect Foundation and IBM Tivoli Monitoring ITM pattern Types pTypes shipped with IBM Cloud Pak System. Vulnerabilities were addressed in IBM Cloud Pak System v2.3.5.1. IBM Cloud Pak System provides IBM Db2 with BLU Acceleration Pattern 1.2.26.0...

CVE-2020-1472

CVE-2020-1472 POC Richiede l'ultima versione di impacket da GitHub con le strutture netlogon aggiunte. Nota: di default questo cambia la password dell'account del controller di dominio. Sì, questo ti permette di fare DCSync, ma rompe anche la comunicazione con altri controller di dominio, quindi...

CVE-2000-0979

CVE-2000-0979 CVE-2000-0979.rb — это автономный инструмент для эксплуатации CVE-2000-0979 против службы SMB Windows 95. msf20000979.rb — это модуль Metasploit. Вы можете скопировать его в ⁨metasploit-framework⁩ ▸ ⁨modules⁩ ▸ ⁨auxiliary⁩ ▸ scanner⁩ ▸ ⁨smb⁩ Более подробная документация появится в...

EUVD-2026-93923

When Gitea's web installer is reachable against a database that already contains users, such as after INSTALLLOCK has been reset to false, submitting the install form with an administrator username matching an existing account issued an authenticated session for that account without verifying its...

CVE-2026-70414

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

Credential Exposure

Overview Affected versions of this package are vulnerable to Credential Exposure in ConnectionFactoryConfigurator.loadConnectionFactory, Map, String, which concatenates the raw AMQP URI, username and password included, into three IllegalArgumentException messages. A user with read access to the...

CVE-2026-70414

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-70414

Dell Command | Configure (DCC) versions prior to 5.2.3.35 are affected by a Plaintext Storage of Password vulnerability (CWE-256). A low privileged attacker with local access could exploit this flaw to cause Information Disclosure . No specific exploit details are provided in the documentation. R...

CVE-2026-70414

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

EUVD-2026-93656

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2025-58434-PoC

CVE-2025-58434-PoC Questo repository contiene uno script Python Proof of Concept PoC per CVE-2025-58434, che consente agli attaccanti di cambiare le password di altri utenti senza processo di autenticazione in flowise versione 3.0.5 e precedenti a causa di una perdita di token. Usage Per eseguire...

CVE-2020-26061

CVE-2020-26061 Bypass dell'autenticazione del portale di reimpostazione password di ClickStudios Passwordstate Informazioni Fornitore: ClickStudios Prodotto: Passwordstate Versioni interessate: Prima della build 8501 della versione 8.5 Ricercatore: Jason Juntunen aka @missing0x00...

CVE-2018-5354

CVE-2018-5354 Client di Reset Password ANIXIS - Escalation di Privilegi / RCE Informazioni Vendor: ANIXIS Prodotto: Client di Reset Password ANIXIS Versioni interessate: Prima della versione 3.22 Ricercatore: Jason Juntunen aka @missing0x00 https://github.com/missing0x00 CVSS: 8.8 Descrizione Il...

CVE-2026-105853

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, token refresh responses and password reset responses can independently return hidden or read-restricted fields that the requesting user cannot...

CVE-2019-9053-exploit

CVE-2019-9053 — SQL Injection non autenticata in CMS Made Simple Descrizione CVE-2019-9053 è una vulnerabilità di iniezione SQL time-based blind che colpisce CMS Made Simple nelle versioni ≤ 2.2.9. Non richiede autenticazione. Il parametro vulnerabile è m1idlist nel modulo News moduleinterface.ph...

CVE-2020-1472-Easy

CVE-2020-1472-Easy Questa è decisamente una cosa che non vorresti eseguire su nulla a cui tieni. Costruito da un write-up e dal lavoro di @obfuscatee e un'altra fonte Utilizza codice da https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472...

CVE-2026-12416-CVE-2026-12417

CVE-2026-12416-CVE-2026-12417 Account Takeover non autenticato tramite convalida debole del reset della password con parametro 'resetuserid' | Escalation dei privilegi non autenticata tramite convalida debole del reset della password con 'resetactivationcode' che porta all'Account Takeover...

NewMachineAccount

NewMachineAccount Panoramica NewMachineAccount.exe è un semplice strumento standalone .exe per creare nuovi account macchina con password personalizzata all'interno di un dominio specificato. Utilizzo NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain -password -ou -user -pass -uac...

GHSA-FX49-4H83-WJV9 Payload didn't enforce field-level password update restrictions

Impact When an auth collection defined a field-level access.update restriction on the password field, the restriction was not enforced on the server correctly. Patches Users should upgrade Payload packages to = 3.90.0 or = 4.0.0-canary.34...

NPM: Payload didn't enforce field-level password update restrictions

NPM: Payload didn't enforce field-level password update restrictions vulnerability discovered by ? in WordPress Npm payload versions 3.90.0...