Lucene search
+L

74126 matches found

Github Security Blog
Github Security Blog
added 2026/07/28 9:56 p.m.19 views

goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)

Summary Start goshs v2.1.3 with -b 'admin:' -sftp. No -fkf. SFTP accepts connections without password. CVE-2026-40884 blocks the empty-username variant -b ':pass'. The empty-password variant bypasses that fix. CVE-2026-40884 CVE-2026-40884 GHSA-c29w-qq4m-2gcv, Apr 13 2026 reported the...

9.8CVSS5.9AI score0.00478EPSS
SaveExploits1References4Affected Software2
Cvelist
Cvelist
added 2026/07/28 9:52 p.m.37 views

CVE-2026-62325 goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allow...

9.1CVSS0.00344EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/07/28 9:52 p.m.11 views

EUVD-2026-50079

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allow...

9.1CVSS5.8AI score0.00344EPSS
SaveExploits1References3
CVE
CVE
added 2026/07/28 9:52 p.m.51 views

CVE-2026-62325

Goshs 2.1.3–2.1.4 SFTP authentication bypass vulnerability arises from sftpserver/sftpserver.go password handler: it only checks Username != "" && Password != "", which allowed unauthenticated access when running with -b 'admin:' -sftp and without -fkf. The issue effectively lets an attacker acce...

9.1CVSS5.8AI score0.00478EPSS
SaveExploits1References3
OSV
OSV
added 2026/07/28 9:52 p.m.8 views

CVE-2026-62325 goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allow...

9.1CVSS5.8AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/07/28 9:52 p.m.11 views

CVE-2026-62325 goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allow...

9.1CVSS5.8AI score0.00478EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/07/28 9:27 p.m.8 views

CVE-2024-5300

A flaw was found in Canonical snapd. The base AppArmor security profile configuration in snapd inadvertently allows strictly confined snap applications to bypass intended sandbox restrictions. This enables a compromised or malicious snap application, when running as root, to access sensitive syst...

5.6CVSS5.8AI score0.00099EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/28 8:53 p.m.14 views

EUVD-2026-44800

NocoBase: Sensitive Data Exposure via SQL Blacklist Bypass...

6.8CVSS5.9AI score0.00469EPSS
SaveExploits0References7
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/28 7:23 p.m.41 views

Security Bulletin: Unauthenticated User Could Gain Remote Access to TS3100/TS3200 (CVE-2016-9005)

Summary IBM TS3100/TS3200 Tape Library could allow an unauthenticated user, with access to the company network, to change a user's password and gain remote access to the system. Vulnerability Details CVEID:CVE-2016-9005 DESCRIPTION: IBM TS3100-TS3200 Tape Library could allow an unauthenticated...

9.8CVSS9.8AI score0.01848EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/07/28 7:17 p.m.12 views

CVE-2026-15992

The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 3.7.1. This is due to missing authorization checks and nonce verification in the getuser function of the ModulePasswordHint class, which unconditionally calls WPUser::setrole with...

8.8CVSS0.00266EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/28 6:35 p.m.38 views

CVE-2026-15992 WP Password Policy <= 3.7.1 - Authenticated (Subscriber+) Privilege Escalation

The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 3.7.1. This is due to missing authorization checks and nonce verification in the getuser function of the ModulePasswordHint class, which unconditionally calls WPUser::setrole with...

8.8CVSS0.00266EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/28 6:35 p.m.39 views

CVE-2026-15992

The WP Password Policy plugin for WordPress (

8.8CVSS5.9AI score0.00266EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/28 6:35 p.m.8 views

CVE-2026-15992 WP Password Policy <= 3.7.1 - Authenticated (Subscriber+) Privilege Escalation

The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 3.7.1. This is due to missing authorization checks and nonce verification in the getuser function of the ModulePasswordHint class, which unconditionally calls WPUser::setrole with...

8.8CVSS5.9AI score0.00266EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/28 6:35 p.m.11 views

EUVD-2026-49987

The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 3.7.1. This is due to missing authorization checks and nonce verification in the getuser function of the ModulePasswordHint class, which unconditionally calls WPUser::setrole with...

8.8CVSS5.9AI score0.00266EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/28 4:20 p.m.18 views

CVE-2026-8058

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...

4.9CVSS0.00207EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/28 3:56 p.m.14 views

EUVD-2026-49885

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...

4.5CVSS5.9AI score0.00207EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/28 3:56 p.m.10 views

CVE-2026-8058

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...

4.5CVSS5.9AI score0.00207EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/28 3:56 p.m.34 views

CVE-2026-8058

Summary: IBM OPENBMC OPENBMC FW1110.00–FW1110.20 and FW1060.00–FW1060.71 allow a user to supply a password via a resource dump request, which is then stored in the BMC audit log and visible to an admin. Impact: sensitive information (passwords) logged in an admin-accessible audit log; CVSS 3.1 ba...

4.9CVSS5.9AI score0.00207EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/28 3:56 p.m.36 views

CVE-2026-8058 This Power System update is being released to address a sensitive information disclosure

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...

4.5CVSS0.00207EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/28 3:36 p.m.29 views

CVE-2026-66751

CVE-2026-66751 affects Let’s Chat 0.3.0–0.4.8. The issue is an improper authorization in the server’s room deletion flow: any authenticated user can archive any room by sending a DELETE to the rooms handler without ownership verification. Attackers can enumerate room IDs via the rooms listing end...

5.4CVSS5.9AI score0.00213EPSS
SaveExploits1References2
Rows per page
Query Builder