CVE-2026-62060

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...

The Vault by Focused Hunts

The Vault Vos secrets. Votre contrôle. La plupart des gestionnaires de mots de passe veulent que vous fassiez confiance à une entreprise que vous ne connaissez pas avec vos données sensibles. Ils contrôlent les serveurs et les clés, et vous devez espérer que rien ne se passe mal. The Vault fait l...

Exploit_Sync_Breeze_v10.0.28_CVE-2017-14980

ExploitSyncBreezev10.0.28CVE-2017-14980...

tomcat-cluster-session-sync-exp

L'outil est destiné uniquement à la recherche en sécurité et aux audits internes. Il est interdit de l'utiliser pour lancer des attaques illégales. L'utilisateur est responsable des conséquences. Exploit pour tomcat cluster sync-session Il s'agit d'une vulnérabilité de désérialisation existant...

CVE-2026-62060

The WordPress Captivate Sync plugin (versions

CVE-2026-62060 WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...

EUVD-2026-90808

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...

CVE-2026-62060 WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2...

WordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Captivate Sync versions = 3.3.2...

Blackash-CVE-2025-41115

🔐 CVE-2025-41115: Escalade de privilèges SCIM critique dans Grafana Vulnérabilité critique d'escalade de privilèges SCIM dans Grafana Enterprise 🌟 Résumé CVE-2025-41115 est une vulnérabilité Critique CVSS 10.0 dans Grafana Enterprise affectant sa fonctionnalité d'approvisionnement d'utilisateurs...

CVE-2026-90972

The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' email addresses and to trigger a cross-user CRM re-sync...

EUVD-2026-90515

The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' email addresses and to trigger a cross-user CRM re-sync...

CVE-2026-90972

The WP Fusion Lite WordPress plugin, in versions prior to 3.48.0 , contains a vulnerability where it fails to perform a capability check on two of its admin AJAX handlers . This security oversight allows any authenticated subscriber to access sensitive information, specifically enabling them to r...

CVE-2026-90972 WP Fusion Lite < 3.48.0 - Subscriber+ User Email Disclosure and Cross-User CRM Data Deletion

The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' email addresses and to trigger a cross-user CRM re-sync...

CVE-2018-6537.RCE

CVE-2018-6537 L'exploit cible Sync Breeze exécuté sur Windows 10 x86, build: 16299 , affectant la version 10.4.18 , où un attaquant non authentifié peut effectuer un débordement SEH via une connexion TCP, entraînant une exécution de code à distance. Cet exploit suppose que toutes les atténuations...

CVE-2017-14980.RCE

CVE-2017-14980 이 익스플로잇은 Windows 10 x86, build: 16299에서 실행되는 Sync Breeze Enterprise 버전 10.0.28 을 대상으로 하며, 인증되지 않은 공격자가 HTTP 요청 본문 을 통해 버퍼 오버플로우 를 수행하여 임의 코드 실행 을 유발할 수 있습니다. 이 익스플로잇은 모든 보안 완화 조치예: ASLR, CFG, DEP가 비활성화되어 있다고 가정합니다. !NOTE 이 프로젝트는 Windows 바이너리를 대상으로 하는 기본 버퍼 오버플로우를 실험하면서 개발되었습니다. 제가...

CVE-2026-103398 OpenSave through 2.4.0 Arbitrary File Read and Write via Peer-Controlled Save Path

OpenSave through 2.4.0 fails to properly validate save paths supplied by paired peers in the manifest request handler. Attackers can specify arbitrary directories outside configured save locations to read and write files through manifest and sync routes...

CVE-2026-103397 OpenSave before 2.4.0-beta.1 Authentication Bypass via Spoofed Relay Sender

OpenSave before 2.4.0-beta.1 fails to validate sender identity in WAN relay requests, allowing unpaired room members to impersonate paired devices by spoofing the RelayMessage From field. Attackers who know the room code can join, read paired peer identifiers from announcements, and send forged...

CVE-2026-103397 OpenSave before 2.4.0-beta.1 Authentication Bypass via Spoofed Relay Sender

OpenSave before 2.4.0-beta.1 fails to validate sender identity in WAN relay requests, allowing unpaired room members to impersonate paired devices by spoofing the RelayMessage From field. Attackers who know the room code can join, read paired peer identifiers from announcements, and send forged...

CVE-2026-103397

The OpenSave software prior to version 2.4.0-beta.1 is vulnerable to an authentication bypass due to insufficient validation of sender identities in WAN relay requests. An attacker who knows the room code can join a room, extract paired peer identifiers from announcements, and then spoof the Rela...