87198 matches found
Seecret.it
📦 Seecret.it — Secure sharing via one-time link Seecret.it is an online service for sharing passwords, documents or sensitive information via encrypted one-time links. Your data remains invisible, secure, and self-destructs after viewing. Ideal for IT teams, businesses, freelancers, and anyone...
PT-2026-107575
Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can send a different forwarded address per request so the limiter keyed on rewritten RemoteAddr never...
PT-2026-107407
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...
PT-2026-107404
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...
CVE-2026-107271: Use of Less Trusted Source
Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can send a different forwarded address per request so the limiter keyed on rewritten RemoteAddr never...
CVE-2026-104953: Improper Neutralization of Special Elements used in an SQL Command
The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or higher to perform SQL injection attacks and read sensitive data such as password hashes...
CVE-2026-104667: Improper Neutralization of Special Elements used in an SQL Command
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can rea...
PT-2026-107587
Name of the Vulnerable Software and Affected Versions Cisco License On-Prem affected versions not specified Description An issue in the web-based management interface of Cisco License On-Prem, previously known as Cisco Smart Software Manager On-Prem, allows an unauthenticated remote attacker to...
PT-2026-107717
Name of the Vulnerable Software and Affected Versions pgjdbc versions 42.7.11 through 42.7.13 Description The PostgreSQL JDBC Driver fails to enforce restrictions when the requireAuth connection property excludes all six known authentication methods e.g.,...
CVE-2026-20328: Missing Authorization
A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to gain unauthorized access to an affected application. This vulnerability is due to improper checks during th...
CVE-2026-107219: Uncontrolled Resource Consumption
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an attacker-controlled spinCount and performs that many password-key derivation iterations before verifier validation. OpenFile reaches agileDecrypt, which passes...
Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities
Summary Vulnerabilities found in IBM Db2 LUW that affect Foundation and IBM Tivoli Monitoring ITM pattern Types pTypes shipped with IBM Cloud Pak System. Vulnerabilities were addressed in IBM Cloud Pak System v2.3.5.1. IBM Cloud Pak System provides IBM Db2 with BLU Acceleration Pattern 1.2.26.0...
CVE-2000-0979
CVE-2000-0979 CVE-2000-0979.rb — это автономный инструмент для эксплуатации CVE-2000-0979 против службы SMB Windows 95. msf20000979.rb — это модуль Metasploit. Вы можете скопировать его в metasploit-framework ▸ modules ▸ auxiliary ▸ scanner ▸ smb Более подробная документация появится в...
EUVD-2026-93923
When Gitea's web installer is reachable against a database that already contains users, such as after INSTALLLOCK has been reset to false, submitting the install form with an administrator username matching an existing account issued an authenticated session for that account without verifying its...
CVE-2026-70414
Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...
Credential Exposure
Overview Affected versions of this package are vulnerable to Credential Exposure in ConnectionFactoryConfigurator.loadConnectionFactory, Map, String, which concatenates the raw AMQP URI, username and password included, into three IllegalArgumentException messages. A user with read access to the...
CVE-2026-70414
Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...
EUVD-2026-93656
Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...
CVE-2026-70414
Dell Command | Configure (DCC) versions prior to 5.2.3.35 are affected by a Plaintext Storage of Password vulnerability (CWE-256). A low privileged attacker with local access could exploit this flaw to cause Information Disclosure . No specific exploit details are provided in the documentation. R...
CVE-2026-70414
Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...