WordPress Simply Schedule Appointments <1.5.7.7 - Information Disclosure

WordPress Simply Schedule Appointments plugin before 1.5.7.7 is susceptible to information disclosure. The plugin is missing authorization in a REST endpoint, which can allow an attacker to retrieve user details such as name and email address. id: CVE-2022-2373 info: name: WordPress Simply Schedu...

netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

CVE-2026-16540-SimplyScheduleAppointments

CVE-2026-16540 — Simply Schedule Appointments 1.6.12.6 Unauthenticated Appointment Data Disclosure and Mass Deletion via purge Endpoint Field| Details ---|--- CVE| CVE-2026-16540 Plugin| Simply Schedule Appointments Affected Versions| 1.6.12.6 Fixed In| 1.6.12.6 Active Installs| 70,000 CVSS 3.1|...

CVE-2026-128091

When MCUboot is built with the TinyCrypt crypto backend MCUBOOTUSETINYCRYPT, bootutilaesctrdrop in boot/bootutil/include/bootutil/crypto/aesctrtinycrypt.h was an empty stub. The AES-CTR context for this backend is the fully expanded AES-128 key schedule struct tcaeskeyschedstruct. Generic code...

CVE-2026-128091 AES key schedule not cleared by the TinyCrypt AES-CTR backend in MCUboot bootutil

When MCUboot is built with the TinyCrypt crypto backend MCUBOOTUSETINYCRYPT, bootutilaesctrdrop in boot/bootutil/include/bootutil/crypto/aesctrtinycrypt.h was an empty stub. The AES-CTR context for this backend is the fully expanded AES-128 key schedule struct tcaeskeyschedstruct. Generic code...

EUVD-2026-124811

When MCUboot is built with the TinyCrypt crypto backend MCUBOOTUSETINYCRYPT, bootutilaesctrdrop in boot/bootutil/include/bootutil/crypto/aesctrtinycrypt.h was an empty stub. The AES-CTR context for this backend is the fully expanded AES-128 key schedule struct tcaeskeyschedstruct. Generic code...

CVE-2026-128091

The MCUboot bootloader contains a vulnerability when built with the TinyCrypt crypto backend (MCUBOOT_USE_TINYCRYPT). The function bootutil_aes_ctr_drop() in boot/bootutil/include/bootutil/crypto/aes_ctr_tinycrypt.h was an empty stub, failing to clear the AES-128 key schedule from memory. This ca...

PT-2026-146109

When MCUboot is built with the TinyCrypt crypto backend MCUBOOT USE TINYCRYPT, bootutil aes ctr drop in boot/bootutil/include/bootutil/crypto/aes ctr tinycrypt.h was an empty stub. The AES-CTR context for this backend is the fully expanded AES-128 key schedule struct tc aes key sched struct...

EUVD-2026-123859

A improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0...

CVE-2026-126226

A improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0...

CVE-2026-126226

An OS command injection vulnerability (CWE-78) exists in several Fortinet products, including FortiAnalyzer , FortiAnalyzer Cloud , FortiManager , and FortiManager Cloud . Specifically, affected versions include FortiAnalyzer 8.0.0, 7.6.0-7.6.7, 7.4.0-7.4.11, and 7.2.0-7.2.12 (and their Cloud cou...

CVE-2026-126226

A improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0...

CVE-2026-125437

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.13.0...

EUVD-2026-123387

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.13.0...

CVE-2026-125437

The Simply Schedule Appointments WordPress plugin (versions up to and including 1.6.13.0 ) is affected by a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , leading to a broken access control scenario. While the ...

CVE-2026-125437 WordPress Simply Schedule Appointments plugin <= 1.6.13.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.13.0...

WordPress Simply Schedule Appointments plugin <= 1.6.13.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Daniel in WordPress Plugin Simply Schedule Appointments versions = 1.6.13.0...

CVE-2021-45416

Docker RosarioSIS Installation Minimum requirements: Docker & Git working. You can pull the image from DockerHub or: 1. docker on $ git clone https://github.com/dnr6419/CVE-2021-45416.git $ cd CVE-2021-45416 $ docker-compose up -d 2. Visit the URL and Install the Database...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

CVE-2026-125437: NSquared Simply Schedule Appointments: Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows…

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.13.0...