CVE-2026-42604

Actual is a local-first personal finance tool. The POST /openid/config endpoint in Actual Budget's sync-server versions = 26.4.0 exposes the full OpenID Connect configuration—including the OAuth2 clientsecret—to any caller who knows the bootstrap password. The endpoint also lacks authentication a...

CVE-2026-45749

Termix (web-based server management platform) prior to v2.3.2 exposes MFA risk via POST /users/totp/disable and POST /users/totp/backup-codes, which accept only the account password as authentication for MFA-critical actions. An attacker with a compromised password can disable TOTP or regenerate ...

IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.4 (7267362)

The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a vulnerability as referenced in the 7267362 advisory. - IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expect...

Hard coded credentials vulnerability in GoHarbor's Harbor

Overview GoHarbor's Harbor default admin password presents a security risk because it does not require change upon initial deployment. Description GoHarbor's Harbor is an open-source OCI-compliant container registry project that stores, signs, and manages container images. Harbor initializes with...

CVE-2026-29108 Authenticated SuiteCRM Users Can Retrieve The Password Hash of Any User

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to versions 8.9.3, an authenticated API endpoint allows any user to retrieve detailed information about any other user, including their password hash, username, and MFA configuration. As...

CVE-2025-1878

A vulnerability has been found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This vulnerability affects unknown code of the component WiFi. The manipulation leads to use of default password. Access to the local network is required for this attack to succeed. The complexity ...

CVE-1999-0508

An account on a router, firewall, or other network device has a default, null, blank, or missing password...

EUVD-2019-17117

Malware in sbrugna...

EUVD-2020-28505

Malware in sbrugna...

EUVD-2020-25188

Malware in sbrugna...

EUVD-2020-21380

Malware in sbrugna...

EUVD-2020-3416

Malware in sbrugna...

EUVD-2021-15658

Malware in sbrugna...

EUVD-2002-0302

Malware in sbrugna...

EUVD-2007-3185

Malware in sbrugna...

EUVD-2013-4370

Malware in sbrugna...

EUVD-2018-8740

Malware in sbrugna...

EUVD-2018-6743

Malware in sbrugna...

EUVD-2013-4060

Malware in sbrugna...

EUVD-1999-0516

Malware in sbrugna...