CVE-2024-3408-dtale

CVE-2024-3408 - D-Tale 身份验证绕过与 RCE 用于复现 CVE-2024-3408 的可复现实验室环境，该漏洞是 D-Tale 中的身份验证绕过和远程代码执行漏洞。 漏洞 D-Tale 3.15.1 及更早版本存在漏洞，原因如下： 1. 硬编码的 SECRETKEY （"Dtale"）用于 Flask 会话签名——允许伪造会话 Cookie 2. 通过自定义过滤器执行代码 ——test-filter 端点使用 pandas query，可被滥用以执行任意 Python 代码 CVSS ：9.8（严重） 受影响版本 ：D-Tale = 3.15.1 快速开始...

Linux Distros Unpatched Vulnerability : CVE-2026-23933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation...

CVE-2026-19264 Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover

Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file without normalising the path or confining it to that directory, and the route requires no authentication. Raw...

EUVD-2026-54488

Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path segments onto the upload directory and streams the file without normalising the path or confining it to that directory, and the route requires no authentication. Raw...

Missing Authentication for Critical Function

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the closesqleditorsession and checktransactionstatus functions in the SQL Editor module, which lack proper authentication checks. An attacker can execute...

PT-2026-27115

Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 stores administrative authentication material in the ecos pw cookie using a reversible Base64-encoded format with a static suffix. An attacker who obtains or derives this cookie value can forge a valid administrative session and gai...

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

CVE-2025-60306

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

CVE-2025-56274

SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged such as admin sessions and perform sensitive operations such as adding new users...

CVE-2021-41192

Redash is a package for data visualization and sharing. If an admin sets up Redash versions 10.0.0 and prior without explicitly specifying the REDASHCOOKIESECRET or REDASHSECRETKEY environment variables, a default value is used for both that is the same across all installations. In such cases, th...

The vulnerability of the GlobalProtect Agent VPN application, related to authentication procedures that are insufficient, allows a hacker to forge a VPN session and gain access under the user’s identity.

The vulnerability of the corporate VPN application GlobalProtect Agent is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to forge a VPN session and gain access under the user’s identity...