11982 matches found
CVE-2026-59292
PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to $java.io.tmpdir/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring...
ets5-password-recovery
ETS5 Password Recovery Tool Sommario Introduzione Installazione Requisiti Come funziona il recupero della password? Come è stato scoperto il difetto di progettazione? Come si può mitigare il rischio? Divulgazione coordinata delle vulnerabilità Licenza Registro delle modifiche Introduzione Hai...
CVE-2025-70849
CVE-2025-70849: XSS Memorizzato in Podinfo Riepilogo Una vulnerabilità di sicurezza CWE-79 è stata identificata in Podinfo , un'applicazione web per dimostrare microservizi Kubernetes. La funzionalità /store consente a utenti non autenticati di caricare contenuti HTML/JS arbitrari, portando a XSS...
EUVD-2026-67180
PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to $java.io.tmpdir/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring...
aapanel
aapanel aapanel 6.6.6 - CVE-2020-14950 Descrizione : consente agli utenti autenticati da remoto di eseguire comandi arbitrari tramite il menu impostazioni di Software Store. Versione interessata : tutte le versioni = 6.6.6 Informazioni Per realizzare questo PoC, ho semplicemente installato il...
WordPress MultiVendorX plugin < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint vulnerability
Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint vulnerability discovered by ryan fabella in WordPress Plugin MultiVendorX versions 5.0.11...
CVE-2026-22730-Scanner
Scanner & Exploit CVE-2026-22730 – SQL Injection nel MariaDB Vector Store di Spring AI Uno strumento professionale di valutazione della sicurezza per CVE-2026-22730 – una vulnerabilità critica di SQL injection scoperta nel MariaDB vector store di Spring AI. Questo strumento consente a penetration...
UAC_bypass_windows_store
UACbypasswindowsstore Windows 10 LPE UAC-Bypass in Windows Store WSReset.exe uacbypassmod.c exe ist vollständig automatisiert. Sie müssen UAC.bat nicht ausführen. Registry-Methode : https://github.com/sailay1996/FilelessUACbypassWSReset...
CVE-2025-70849-Podinfo
CVE-2025-70849: XSS persistente in Podinfo Riepilogo È stata identificata una vulnerabilità di sicurezza CWE-79 in Podinfo , un'applicazione web per la dimostrazione di microservizi Kubernetes. La funzionalità /store consente a utenti non autenticati di caricare contenuti HTML/JS arbitrari,...
CVE-2026-61792
Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...
CVE-2026-61792 Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)
Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...
CVE-2026-61792
Weblate , a web-based continuous localization platform, is affected by a path traversal vulnerability in its App store metadata download feature (versions prior to 2026.7 ). Attacker-influenced paths are resolved without adequate confinement to the repository, allowing a user with project-adminis...
CVE-2026-61792 Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)
Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...
CVE-2026-46369
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::isvalidat, allowing a remote attacker to repl...
CVE-2026-46369 Nimiq: Validity store off by one error
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::isvalidat, allowing a remote attacker to repl...
CVE-2026-46369
Nimiq (Rust implementation of the Nimiq Proof-of-Stake protocol, Albatross consensus) is affected by an off-by-one error in its validity store through version 1.5.0 . The store uses a strict lower-bound comparison that expires a stored transaction one block too early relative to Transaction::is_v...
CVE-2026-46369 Nimiq: Validity store off by one error
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::isvalidat, allowing a remote attacker to repl...
CVE-2026-47841
An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...
EUVD-2026-66639
An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...