CVE-2026-82544

A cross-site request forgery (CSRF) vulnerability exists in wger-project wger up to version 2.6.0-alpha2 , specifically in the reset_user_password function within the Password Reset component (wger/gym/views/gym.py). A remote attacker can exploit this by manipulating a victim into performing an u...

CVE-2026-82544 wger-project wger Password Reset gym.py reset_user_password cross-site request forgery

A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function resetuserpassword of the file wger/gym/views/gym.py of the component Password Reset. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. This...

CVE-2026-82544 wger-project wger Password Reset gym.py reset_user_password cross-site request forgery

A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function resetuserpassword of the file wger/gym/views/gym.py of the component Password Reset. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. This...

CVE-2026-82544 wger-project wger Password Reset gym.py reset_user_password cross-site request forgery

A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function resetuserpassword of the file wger/gym/views/gym.py of the component Password Reset. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. This...

EUVD-2026-68219

A flaw has been found in wger-project wger up to 2.6.0-alpha2. This issue affects the function resetuserpassword of the file wger/gym/views/gym.py of the component Password Reset. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. This...

CVE-2025-26202-Details

CVE-2025-26202-Details CVE-2025-26202: Cross-Site Scripting XSS in DZS Router Web Interface Description A Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in the DZS Router Web Interface. An authenticated attacker...

CVE-2026-82543

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

CVE-2026-82542

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

radar

Radar Radar es un escáner de red pequeño pero eficiente escrito en Rust, fuertemente inspirado por masscan. Estas son las características principales: Implementaciones de TCP, UDP, DHCP y ARP en espacio de usuario, gracias a pnet Ser asíncrono Escaneo aleatorio de IPs/puertos sin...

CVE-2022-24654

CVE-2022-24654 PoC de CVE-2022-24654 - INTELBRAS ATA 200 Firmware 74.19.10.21 Cross-Site Scripting almacenado autenticado Pasos para reproducir: 1. Inicie sesión en el equipo a través de su navegador web 2. Vaya a Management Syslog 3. En el "Field Server Address" inyecte el payload "-prompt"XSS"-...

shirocrack

shirocrack Simple cracker de hashes para Apache Shiro escrito en Golang. Útil para explotar CVE-2024-4956. Mantengámoslo breve CVE-2024-4956 es una vulnerabilidad de path traversal en Sonatype Nexus Repository que permite a un atacante no autenticado con acceso de red al servidor leer archivos...

CVE-2026-82543 vastsa FileCodeBox Pickup Limit views.py update_file_usage race condition

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

CVE-2026-82543

vastsa FileCodeBox (up to version 2.3) contains a race condition in the update_file_usage function located in apps/base/views.py, within the Pickup Limit Handler component. The vulnerability is exploitable remotely with no privileges required and no user interaction , yielding low impact on confi...

EUVD-2026-68203

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

CVE-2026-82543 vastsa FileCodeBox Pickup Limit views.py update_file_usage race condition

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

CVE-2026-82543 vastsa FileCodeBox Pickup Limit views.py update_file_usage race condition

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

EUVD-2026-68200

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

CVE-2026-82542 Tenda HG10 Boa Web Server formIPv6Routing buffer overflow

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

CVE-2026-82542

A buffer overflow in the Boa Web Server component of Tenda HG10 (version 300001138) affects the function formIPv6Routing in the file /boaform/admin/formIPv6Routing. The overflow is triggered by manipulating the destNet argument and is exploitable remotely with no authentication required , yieldin...

cilium v1.20.1

.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span...