607 matches found
PRISM-AP
PRISM-AP ABOUT: PRISM-AP is an automated Wireless RogueAP MITM attack framework. FEATURES: Easy to setup and use and full automated Leverages MANA wifi attack to lure client connections Partial HSTS bypass via bettercap Intercept and view all HTTP headers, cookies and URL's View all DNS requests...
CVE-2026-84731
An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters...
EUVD-2026-102206
An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters...
CVE-2026-84731
An unauthenticated remote attacker can achieve a pre-authentication admin bypass and Remote Code Execution (RCE) in the Nutanix Prism Gateway inside AOS . The root cause is a misconfiguration in the application's authentication filters, which allows an attacker to include a crafted internal manag...
CVE-2026-84731 Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOS
An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal management HTTP header. The vulnerability is caused by a misconfiguration in the application's authentication filters...
GHSA-R4XH-JQRQ-34V2 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, langfuse, renovate, langfuse-fips, lerna, prism...
GHSA-R4XH-JQRQ-34V2 vulnerabilities
Vulnerabilities for packages: renovate, prism, lerna...
CVE-2026-93748 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, prism...
GHSA-CH52-4W7C-C8XP vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, prism...
CVE-2026-102276 vulnerabilities
Vulnerabilities for packages: npm, nextcloud-server, sqlpad, prism, jupyter-base-notebook, renovate, opensearch-dashboards, ts-patch, lerna, rancher-api-ui...
GHSA-6J4F-FJ2G-MC7P vulnerabilities
Vulnerabilities for packages: npm, nextcloud-server, sqlpad, prism, jupyter-base-notebook, renovate, opensearch-dashboards, ts-patch, lerna, rancher-api-ui...
Beyond the Headset: A Systematization of Knowledge on Extended Reality Privacy and Security in Healthcare
Extended reality XR systems are increasingly used in healthcare applications ranging from surgical planning to remote rehabilitation and mental health support. However, the rich streams of sensor, biometric, behavioral, and environmental data that enable these applications also introduce...
WordPress SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin <= 4.7.42 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read vulnerability
Authenticated Administrator+ Path Traversal to Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin SSL Zen versions = 4.7.42...
WordPress Search Atlas SEO – OTTO AI SEO Automation for WordPress plugin <= 2.6.23 - Missing Authorization to Authenticated (Subscriber+) Whitelabel Password Modification vulnerability
Missing Authorization to Authenticated Subscriber+ Whitelabel Password Modification vulnerability discovered by Wordfence PRISM in WordPress Plugin Search Atlas SEO versions = 2.6.23...
WordPress NEX-Forms – Ultimate Forms Plugin for WordPress plugin <= 9.3.0 - Authenticated (Administrator+) SQL Injection vulnerability
Authenticated Administrator+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin NEX-Forms versions = 9.3.0...
WordPress Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter vulnerability
WordPress Eventin - Event Calendar, Tickets, Registration, Booking & WooCommerce plugin = 4.1.23 - Authenticated Subscriber+ Privilege Escalation via mapmetacap Filter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Event Solution versions = 4.1.23...
SUSE CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...
CVE-2026-85730 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, wazuh-dashboard, langfuse, renovate, kibana, langfuse-fips, lerna, prism...