IAM Proxy Component Compromise Information Disclosure

The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Platform V IAM is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

DesktopServicesHelper Privilege Escalation

The vulnerability of DesktopServicesHelper in macOS operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Bestechic BES2300 Bluetooth Audio SoC Buffer Overflow DoS

The vulnerability of the SBCDecodeFrames function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failure...

FOQUZ Platform Data Compromise

The vulnerability of the FOQUZ platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

CVE-2024-50623

CVE-2024-50623 Cleo Unrestricted file upload and download PoC CVE-2024-50623 Arbitrary File Write python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "........\poc.dll" / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y...

opencve

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

CVE-2026-19422

Zohocorp ManageEngine DDI Central versions below 6301 are affected by an authentication bypass vulnerability within the Windows DNS and DHCP agent synchronization APIs. This flaw allows an unauthenticated user to impersonate onboarded Windows servers, leading to unauthorized DNS and DHCP modifica...

CVE-2020-13094

Title: Dolibarr 11.0.3 - Persistent Cross-Site Scripting Author: Mehmet Kelepce / Gais Cyber Security Date : 2020-04-14 Vendor: https://www.dolibarr.org/ Exploit-DB Author ID: 8763 Remotely Exploitable: Yes Dynamic Coding Language: PHP CVSSv3 Base Score: 7.4 AV:N, AC:L, PR:L, UI:N, S:C, C:L, I:L,...

CVE-2022-32832

CVE-2022-32832 Proof-of-concept and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6 CVE-2022-32832 is a vulnerability in the AppleAPFSUserClient::methodDeltaCreateFinalize external method selector 49. Here is the decompilation pre-patch: int64 cdecl...

CVE-2024-42861

CVE-2024-42861 The DOS attack against IEEE 802.1AS standardgPTP protocol CVE ID CVE-2024-42861 PRODUCT IEEE 802.1AS standard VERSION IEEE 802.1AS-2020, IEEE 802.1AS-2010 PROBLEM DOS attack DESCRIPTION When a port of a device with IEEE 802.1AS enabled receives two PdelayReq messages with different...

CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

ALPINE-CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

DEBIAN-CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

CVE-2026-119618

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

EUVD-2026-123532

Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's modhttp2 in assignheaders can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of modh2 from GitHub: from 2.0.8 through 2.0.42...

freerdp: FreeRDP: Denial of Service via malformed image clipboard payloads

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server or a man-in-the-middle network attacker can cause a Denial of Service DoS by sending malformed PNG or JPEG image data during clipboard synchronization. Due to missing error handling in the image parsing routines, processi...

CVE-2026-126662

Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 contains an access control bypass vulnerability that allows filemount-restricted backend users to modify folders outside their filemount via the file manager Edit-Multiple operation. Attackers holding the protected or...

CVE-2026-112201

A flaw was found in the login-failure storage component of Keycloak, the identity and access management solution. This issue specifically affects deployments using MySQL or MariaDB databases in a multi-node configuration. When multiple failed login attempts occur simultaneously for the same...

CVE-2026-112201 Keycloak-services: keycloak-services: login-failure upsert trusts mysql/mariadb affected-row count

A flaw was found in the login-failure storage component of Keycloak, the identity and access management solution. This issue specifically affects deployments using MySQL or MariaDB databases in a multi-node configuration. When multiple failed login attempts occur simultaneously for the same...

EUVD-2026-123400

A flaw was found in the login-failure storage component of Keycloak, the identity and access management solution. This issue specifically affects deployments using MySQL or MariaDB databases in a multi-node configuration. When multiple failed login attempts occur simultaneously for the same...