17729 matches found
CVE-2026-108901
A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Rendering. Performing a manipulation of the argument alignment results in improper restriction of rendered ui layers. The attack ca...
CVE-2026-85957
Progress MarkLogic Server versions 11.x prior to 11.3.7 are vulnerable to an improper XML external entity restriction within the SAML processing component. The underlying cause is a SAML parser configuration that permits the processing of external DTDs or entities . This vulnerability could lead ...
CVE-2026-108901
A vulnerability exists in the Display QR Code Rendering component of the Shenzhen HCC Technology MPOS M6 PLUS 1.31-N . By manipulating the argument alignment , an attacker can cause an improper restriction of rendered ui layers . This attack is restricted to the local network . While the vendor h...
CVE-2026-108901 Shenzhen HCC Technology MPOS M6 PLUS Display QR Code Rendering ui layer
A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Rendering. Performing a manipulation of the argument alignment results in improper restriction of rendered ui layers. The attack ca...
EUVD-2026-97511
A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Rendering. Performing a manipulation of the argument alignment results in improper restriction of rendered ui layers. The attack ca...
SUSE-SU-2026:4617-1 Security update for stunnel
This update for stunnel fixes the following issues: - CVE-2026-70367: incomplete IP address filtering in SOCKS proxy mode can allow localhost restriction bypasses bsc1274207. - CVE-2026-70368: oversized log messages in logging routines can cause stack out-of-bounds reads bsc1274206...
CVE-2026-108901: Improper Restriction of Rendered UI Layers or Frames
A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Rendering. Performing a manipulation of the argument alignment results in improper restriction of rendered ui layers. The attack ca...
CVE-2026-108727
EdgeEver through 1.108.0 contains a missing authorization vulnerability in the Hono API memo-template routes that allows holders of scoped API tokens to bypass token scope restrictions because template handlers never call requireScopes. Attackers with a token lacking write:memos can save a templa...
CVE-2026-108731
A flaw was found in raven. A missing authorization check allows an authenticated remote attacker to bypass the invite-only workspace restriction. By directly calling the workspace joining function, an attacker can gain unauthorized membership to invite-only workspaces, enabling them to read and...
ipsourcebypass
Este script de Python se puede usar para eludir las restricciones de fuente IP usando cabeceras HTTP. Características 17 cabeceras HTTP. Multihilo. Exportación JSON con --json outputfile.json. Detección automática de las soluciones más exitosas. Uso $ ./ipsourcebypass.py -h IP source bypass using...
CVE-2026-108580
AniWorld Downloader before 5.3.0 contains an improper restriction of authentication attempts vulnerability in the WebUI /login POST handler that allows unauthenticated attackers to guess passwords without throttling. Attackers can enumerate usernames through verifyuser response timing and...
CVE-2026-96574
The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpufpaymentmethod' parameter in all versions up to, and including, 4.3.12 due to...
EUVD-2026-96127
The W3 Total Cache WordPress plugin before 2.10.6 does not confine a media-import file copy to the document root, nor enforce an effective file-type restriction on it, allowing users with the Author role or higher to plant content that, once an administrator runs the import, copies an arbitrary...
CVE-2026-108580: Improper Restriction of Excessive Authentication Attempts
AniWorld Downloader before 5.3.0 contains an improper restriction of authentication attempts vulnerability in the WebUI /login POST handler that allows unauthenticated attackers to guess passwords without throttling. Attackers can enumerate usernames through verifyuser response timing and...
BIT-GHOST-2026-103271 Ghost 4.0.0 before 6.63.0 Restricted Content Bypass
Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerability that allows unauthenticated visitors to access gated post content. Attackers can bypass content restrictions by directly querying the content API to retrieve restricted posts without authentication...
CVE-2026-76779
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges,...
EUVD-2026-95563
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges,...
CVE-2026-76779
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Improper Restriction of Excessive Authentication Attempts (CWE-307). An unauthenticated attacker with remote access can exploit this flaw to bypass protection mechanisms, achieve Elevation of privil...
CVE-2026-76779
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges,...
CVE-2026-76779: Improper Restriction of Excessive Authentication Attempts
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges,...