CVE-2026-6285

CVE-2026-6285 is an Improper Authentication vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF , affecting versions 2.01.0.2183 through 10092026 . The root cause is a weak password recovery mechanism for forgotten passwords, allowing remote exploitation of the recovery flow. Th...

CVE-2026-6285 Improper Authentication in Ankaref's LIBRID/LIBREF

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Password Recovery Exploitation. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosure but...

PT-2026-89412

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Password Recovery Exploitation. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosure but...

EUVD-2020-20574

Malware in sbrugna...

EUVD-2005-4878

Malware in sbrugna...

EUVD-2019-13064

Malware in sbrugna...

EUVD-2018-2436

Malware in sbrugna...

EUVD-2005-2510

Malware in sbrugna...

EUVD-2008-0573

Malware in sbrugna...

EUVD-2002-1717

Malware in sbrugna...

EUVD-2025-5957

Malicious code in bioql PyPI...

EUVD-2024-19969

Malicious code in bioql PyPI...

EUVD-2023-38070

Malicious code in bioql PyPI...

EUVD-2022-52257

Malicious code in bioql PyPI...

EUVD-2024-22464

Malicious code in bioql PyPI...

Endress+Hauser MEAC300-FNADE4 Information Disclosure Vulnerability (CNVD-2025-16346)

The Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions data management computer from Endress+Hauser Vietnam. An information disclosure vulnerability exists in the Endress+Hauser MEAC300-FNADE4 that stems from the authentication mechanism based on the challenge response system using the...

PT-2025-27787 · Vnc · Vnc

Name of the Vulnerable Software and Affected Versions: VNC affected versions not specified Description: The issue concerns the VNC authentication mechanism, which uses a challenge-response system. This system relies on both the server and client using the same password for encryption. An attacker...

CVE-2025-6932

A vulnerability, which was classified as problematic, was found in D-Link DCS-7517 up to 2.02.0. This affects the function gFnGenPassForQlync of the file /bin/httpd of the component Qlync Password Generation Handler. The manipulation leads to use of hard-coded password. It is possible to initiate...

ROS-20250619-05

A vulnerability in the PostgreSQL PgBouncer connection pooling program is related to the fact that a password can be used after it expires, because authquery does not take into account the value of Postgre's VALID UNTIL. Exploitation of the vulnerability allows an attacker acting remotely to gain...

CVE-2025-47646

CVE-2025-47646 affects the WordPress plugin PSW Front-end Login & Registration (versions ≤ 1.13). The Nuclei template and related exploits describe a weak password recovery/unauthenticated registration mechanism that can enable account creation without authentication, potentially followed by priv...