598484 matches found
@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +9 more potentially affected by unknown CVE via pnpm (>=10.8.1, <=10.33.2)
pnpm NPM version =10.8.1, =0.1.0, =1.1.1, =0.1.0-beta.3, =0.1.8, =0.1.0, =0.0.2, =0.2.5, =1.0.4, =1.0.7 Source cves: unknown CVE Source advisory: OSV:GHSA-VX52-2968-3VC6...
EUVD-2026-69569
Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...
CVE-2026-78608 Missing Authorization in Kibana Leading to Information Disclosure
Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...
CVE-2026-78608 Missing Authorization in Kibana Leading to Information Disclosure
Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...
CVE-2026-78608
CVE-2026-78608 is a Missing Authorization (CWE-862) vulnerability in Kibana , where an internal APM integration function lacked a proper authorization check. This allowed any authenticated Kibana user to read APM server credentials that should only be accessible to users with APM or Fleet adminis...
CVE-2026-78608 Missing Authorization in Kibana Leading to Information Disclosure
Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...
CVE-2021-3156
CVE-2021-3156 PoC مقدمة هذا استغلال لثغرة sudo CVE-2021-3156 المعروفة بـ Baron Samedit من Qualys. الاستخدام بناء: root@kitploit: $ make قائمة الأهداف: root@kitploit: $ ./sudo-hax-me-a-sandwich تشغيل: root@kitploit: $ ./sudo-hax-me-a-sandwich الوضع اليدوي: root@kitploit: $ ./sudo-hax-me-a-sandwich...
CVE-Requests-1896609
CVE Requests 1896609 - feiskyer/mcp-kubernetes-server कार्यकारी सारांश यह रिपोर्ट feiskyer/mcp-kubernetes-server पैकेज में खोजी गई दो गंभीर सुरक्षा कमजोरियों का विवरण देती है। जब तैनात किया जाता है, तो सर्वर kubectl नाम का एक MCP टूल प्रदर्शित करता है जो Kubernetes क्लस्टर तक सीमित, सुरक्षित पहुँ...
tracehound
مخزن أمان زمني حتمي لواجهات برمجة التطبيقات عالية السرعة الأنظمة الخارجية تشير إلى التهديدات. Tracehound يحافظ على الأدلة. الموقع الإلكتروني · فهرس التوثيق · مرجع API · التكوين · RFCs · الأمان · سجل التغييرات Tracehound هو بيئة تشغيل جنائية خالية من اتخاذ القرار، تقع بين الكشف العلوي والاستجابة...
CVE-2026-83551
Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...
GHSA-3WGP-X9P5-C7CC Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes
Summary Appium's base-driver mounts the built-in /test/guinea-pig, /test/guinea-pig-scrollable and /test/guinea-pig-app-banner routes unconditionally on every server. The handler reflects the throwError query param, the comments POST field, and the User-Agent request header into the returned HTML...
Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes
Summary Appium's base-driver mounts the built-in /test/guinea-pig, /test/guinea-pig-scrollable and /test/guinea-pig-app-banner routes unconditionally on every server. The handler reflects the throwError query param, the comments POST field, and the User-Agent request header into the returned HTML...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in August 2026. Vulnerability Details CVEID:CVE-2026-12590 DESCRIPTION: Impact: In body-parser versions prior to 1.20.6...
Security Bulletin: Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
Summary In addition to updating many operating system level packages, the following security vulnerabilities are addressed with IBM Business Automation Workflow released in August 2026.. Vulnerability Details CVEID:CVE-2026-11541 DESCRIPTION: IBM CICS Transaction Gateway for Multiplatforms 9.1,...
Kibana 8.19.21, 9.4.6, 9.5.2 Security Update (ESA-2026-144)
Missing Authorization in Kibana Leading to Information Disclosure Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana us...
RCE-in-Spring-Cloud-CVE-2022-22963
Spring Cloud में RCE के लिए एक्सप्लॉइट CVE 2022-22963 Spring Cloud Function में रिमोट कमांड निष्पादन के लिए CVE-2022-22963 एक्सप्लॉइट भेद्यता के विवरण के लिए यहाँ और यहाँ देखें PoC अपने होस्ट पर netcat चलाएँ: root@kitploit: $ nc -lvnp 9001 अटैकर होस्ट पर डिफ़ॉल्ट पोर्ट 9001 के साथ एक्सप्लॉइट चलाए...
linux-4.19.72_CVE-2022-29581
HiSax is a Linux hardware-level driver for passive ISDN cards with Siemens chipset ISACS 2085/2086/2186, HSCX SAB 82525. It is based on the Teles driver from Jan den Ouden. It is meant to be used with isdn4linux, an ISDN link-level module for Linux written by Fritz Elfert. root@kitploit: This...
external_expat_2.1.0_CVE-2022-43680
Expat, रिलीज़ 2.1.0 यह Expat है, XML पार्स करने के लिए एक C लाइब्रेरी, जिसे James Clark ने लिखा है। Expat एक स्ट्रीम-ओरिएंटेड XML पार्सर है। इसका मतलब है कि आप पार्स शुरू करने से पहले पार्सर के साथ हैंडलर पंजीकृत करते हैं। जब पार्सर दस्तावेज़ में संबंधित संरचनाओं का पता लगाता है तो ये हैंडलर कॉल...
CVE-2026-51974
An eval injection vulnerability in the getlist function in modules/metaparser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remote attackers to execute arbitrary Python code via a crafted styles payload in the EXIF metadata of an uploaded image file...