318 matches found
CVE-2026-121021
Plaintext Storage of a Password CWE-256 in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to configuration backups to obtain the password of the LDAP directory service...
CVE-2026-121021 Plaintext Storage of LDAP Password in Axxon One Shared Configuration
Plaintext Storage of a Password CWE-256 in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to configuration backups to obtain the password of the LDAP directory service...
CVE-2026-121021
AxxonSoft Axxon One versions before 3.1.0 on Windows and Linux are susceptible to a plaintext storage of a password (CWE-256) vulnerability. The root cause is the insecure storage of the LDAP directory service account password within the main.conf configuration file of the SecurityManager shared ...
EUVD-2026-115714
Plaintext Storage of a Password CWE-256 in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to configuration backups to obtain the password of the LDAP directory service...
Apache HugeGraph 1.7.0 SecurityManager Sandbox Bypass Remote Code Execution
Apache HugeGraph version 1.7.0 contains a SecurityManager sandbox bypass that allows unauthenticated remote command execution through the Gremlin endpoint. !/usr/bin/env bash Apache HugeGraph 1.7.0 Sandbox Bypass Remote Code Execution Vendor: The Apache Software Foundation Product web page:...
Improper Validation of Specified Type of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input in the run method of the ProviderSpecificBootstrapImpl class in Validation.java, which passes a caller influenced action to the single argument form of AccessController.doPrivileged, droppi...
Defcon-Dreamcast-Planetweb-Research
PlanetWeb Dreamcast Browser v3.0 — Eden service-subscription R...
Small Http Server path traversal vulnerability
Small Http Server is a small HTTP server developed by Max Feoktistov. Version 3.06.36 of Small Http Server contains a path traversal vulnerability. This vulnerability stems from an authenticated path traversal exploit, which could allow remote users to bypass SecurityManager’s restrictions and...
CVE-2025-41368: Improper Limitation of a Pathname to a Restricted Directory
Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote users to bypass the intended restrictions of SecurityManager and display any file if they have the appropriate permissions outside the document root configured on the server...
CVE-2023-53944
EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access files outside the document root by bypassing SecurityManager restrictions. Attackers can send GET requests with encoded directory traversal sequences like /..%5c..%5c to read syst...
CVE-2023-53944: Improper Limitation of a Pathname to a Restricted Directory
EasyPHP Webserver 14.1 contains a path traversal vulnerability that allows remote users with low privileges to access files outside the document root by bypassing SecurityManager restrictions. Attackers can send GET requests with encoded directory traversal sequences like /..%5c..%5c to read syst...
EUVD-2005-4337
Malware in sbrugna...
EUVD-2018-0614
Malware in sbrugna...
EUVD-2019-3440
Malware in sbrugna...
EUVD-2010-4320
Malware in sbrugna...
EUVD-2022-3792
Malicious code in bioql PyPI...
EUVD-2023-54446
Malicious code in bioql PyPI...
EUVD-2024-33692
Malicious code in bioql PyPI...