CVE-2022-31766

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions = V1.1.0 V3.0.0,...

CVE-2022-0218

The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the /includes/class-template-designer.php file, in versions up to...

PT-2026-2149

Name of the Vulnerable Software and Affected Versions Tenda 300Mbps Wireless Router F3 Tenda N300 Easy Setup Router Description The routers are susceptible to a security issue stemming from the absence of the HTTPOnly flag on session cookies used with the web-based administrative interface. An...

Exploit for CVE-2026-21876

CVE-2026-21...

CVE-2022-27667

Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console CMC - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...

CVE-1999-0511

IP forwarding is enabled on a machine which is not a router or firewall...

CVE-1999-0580

The HKEYLOCALMACHINE key in a Windows NT system has inappropriate, system-critical permissions...

CVE-1999-0265

ICMP redirect messages may crash or lock up a host...

CVE-1999-0625

The rpc.rquotad service is running...

CVE-1999-0355

Local or remote users can force ControlIT 4.5 to reboot or force a user to log out, resulting in a denial of service...

CVE-1999-0571

A router's configuration service or management interface such as a web server or telnet is configured to allow connections from arbitrary hosts...

CVE-1999-0277

The WorkMan program can be used to overwrite any file to get root access...

CVE-1999-0521

An NIS domain name is easily guessable...

CVE-2019-16864

CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM...

CVE-2019-12757

Symantec Endpoint Protection SEP, prior to 14.2 RU2 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition SEP SBE prior to 12.1 RU6 MP10d 12.1.7510.7002, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to...

CVE-2025-1711

Multiple services of the DUT as well as different scopes of the same service reuse the same credentials...

CVE-2025-1558

Mattermost Mobile Apps versions =2.25.0 fail to properly validate GIF images prior to rendering which allows a malicious user to cause the Android application to crash via message containing a maliciously crafted GIF...

CVE-2024-2912

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...

Malicious code in wwwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00200d502997800295ce4f4ca7fe74962921193042bdddb47c91ef1bc817f61f The package wwwt was found to contain malicious code. Source: ghsa-malware 7076a3b538d3f3d8e1ae114139247fbcd223995fa82f1e63da64c9dc56dc8eb8 Any...

Malicious Package

Overview kdb1-demo-v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...