CVE-2025-62168

CVE-2025-62168 Squid Proxy Information Disclosure in Error handling Scanner Detection & PoC "Due to a failure to redact HTTP Authentication credentials Squid is vulnerable to an Information Disclosure attack. Severity: This problem allows a script to bypass Browser security protections and learn...

keycloak-manage-users-composite

keycloak-manage-users-composite A help-desk account that is only supposed to reset passwords and create users can promote itself. Someone with Keycloak's manage-users role finds a leftover job-title in the realm a composite role that quietly includes manage-realm, pins that title on their own...

CVE-2020-24028

CVE-2020-24028 Description ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Insecu...

CVE-2026-129171

The NginxPulse monitoring tool (versions prior to 1.6.26 ) is vulnerable to an unauthenticated SQL injection via the /api/stats/:type endpoint. The root cause is the improper handling of the id and locationType parameters, which allows remote attackers to append SQL commands. Impact includes the ...

EUVD-2026-125596

NginxPulse 1.5.0 before 1.6.26 contains an unauthenticated sql injection vulnerability that allows remote attackers to append SQL via the id and locationType parameters of /api/stats/:type. Attackers can close the quoted table-name identifier and use error-based output to read database contents,...

cve-2024-10914

POC - CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NAS Overview A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file...

EUVD-2026-125591

A prompt injection vulnerability in all versions of Jet Admin Cloud Platform allows a remote attacker with a free account to expose sensitive .env configuration files and exfiltrate critical credentials. Mitigated via sandbox component around October 29, 2026...

CVE-2026-123965

The Jet Admin Cloud Platform is affected by a prompt injection vulnerability across all versions. This flaw allows a remote attacker possessing a free account to expose sensitive .env configuration files and exfiltrate critical credentials. The vulnerability was mitigated via a sandbox component ...

CVE-2026-98432

CVE-2026-98432: Linux kernel IPv4 TCP use-after-free Attackable over the network, with no login and no user action. The bug is in the kernel code that handles every incoming IPv4 TCP connection. This guide shows how to check a server, protect it until a patched kernel is available, and clean up...

CVE-2021-26832

CVE-2021-26832 Suggested description Cross Site Scripting XSS at the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site. Vulnerability Type...

CVE-2026-57967

CVE-2026-57967 — Apache ActiveMQ Artemis Unauthenticated Session Hijacking SESSIONREATTACH English | Русский | 中文 Unauthenticated remote hijacking of an authenticated CORE-protocol session in Apache ActiveMQ Artemis 2.50.0 – 2.56.0 and org.apache.activemq artifacts 1.0.0 – 2.44.0. An attacker who...

CVE-2004-2271

CVE-2004-2271 Minishare 1.4.1 Remote Buffer Overflow...

EUVD-2026-125454

Improper restriction of excessive authentication attempts in the WAMP-CRA challenge-response authentication path in Zenitel Connect before 1.11.0 allows remote attackers to guess user passwords via unlimited authentication attempts, because the path, in which the broker issues a challenge and the...

CVE-2023-30092

CVE-2023-30092 All Details about CVE-2023-30092 Software: Online Pizza Ordering System 1.0 Software Link: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Vulnerability Type: SQL Injection Affected Component: QTY Parameter Impact Denial of Service:...

CVE-2021-31761

..| CVE-2021-31761 |.. Description : Exploiting a Reflected Cross-Site Scripting XSS attack to get a Remote Command Execution RCE through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution...

VMmanager HTTP Request Spoofing

The vulnerability in VMmanager 6 relates to inconsistent interpretation of HTTP requests. Exploitation of this vulnerability enables a remote attacker to manipulate and forward HTTP requests, bypassing security mechanisms...

DIAFAN.CMS Unrestricted File Upload Code Execution

The vulnerability in the DIAFAN.CMS content management system is related to unrestricted upload of malicious files. Exploitation of this vulnerability may allow a remote attacker to upload arbitrary files...

ReadyScript e-commerce management system Sequence Data Compromise

The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

DIAFAN.CMS Authentication Bypass

The vulnerability in the DIAFAN.CMS content management system is related to the lack of authentication for a critical function. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...

Eltex SMG bridging gateway Remote Administration Data Compromise

The vulnerability in the WEB interface of the remote administration web interface for the Eltex SMG microprogramming gateways is related to a breach in the data protection mechanism. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality and integrity of...