87 matches found
CVE-2019-19393
Rittal CMC PU III – 保存型XSS PoC アプリケーション: Rittal CMC PU III Web管理 デバイス: CMC PU III 7030.000 ソフトウェアリビジョン: V3.11.002 から V3.15.704 まで ハードウェアリビジョン: V3.00 から V6.01 まで 攻撃タイプ: 保存型XSS 解決策: ソフトウェアリビジョン V3.17.10 以降にアップデート 概要:...
PaperCut NG/MF Missing Authentication for Critical Function Vulnerability
PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify certain system configurations. This vulnerability can be chained with CVE-2026-82078...
CVE-2026-81578
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under specific conditions, unauthenticated remote requests targeting administrative functions can trigger backend actions prior to the completion of access validation checks. This allow...
[SECURITY] Fedora 42 Update: rust-resctl-bench-2.2.5-12.fc42
resctl-bench is a collection of whole-system benchmarks to evaluate resource control and hardware behaviors using realistic simulated workloads. Comprehensive resource control involves the whole system. Furthermore, testing resource control end-to-end requires scenarios involving realistic...
[SECURITY] Fedora 43 Update: rust-resctl-bench-2.2.5-12.fc43
resctl-bench is a collection of whole-system benchmarks to evaluate resource control and hardware behaviors using realistic simulated workloads. Comprehensive resource control involves the whole system. Furthermore, testing resource control end-to-end requires scenarios involving realistic...
CI4MS 跨站脚本漏洞
CI4MS is an open-source blog page management tool developed by Ci4MS. Versions of CI4MS prior to 0.31.0.0 contained a cross-site scripting vulnerability. This vulnerability stemmed from improper handling of user input related to email settings in system configurations, which could lead to...
CVE-2026-23597
The CVE-2026-23597 entry concerns an issue in the API error handling of HPE Aruba Networking 5G Core server API that could allow an unauthenticated remote attacker to obtain sensitive information. The available documents indicate that exploitation could reveal user accounts, roles, system configu...
[SECURITY] Fedora 43 Update: rust-resctl-bench-2.2.5-10.fc43
resctl-bench is a collection of whole-system benchmarks to evaluate resource control and hardware behaviors using realistic simulated workloads. Comprehensive resource control involves the whole system. Furthermore, testing resource control end-to-end requires scenarios involving realistic...
CVE-2020-37118
P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user interaction. Attackers can craft malicious web pages to add new admin users, change passwords, and modify system configurations by tricking...
CVE-2025-57796 Use of a hardcoded static key to protect sensitive data in Explorance Blue
Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...
PT-2026-5175
Explorance Blue versions prior to 8.14.12 use reversible symmetric encryption with a hardcoded static key to protect sensitive data, including user passwords and system configurations. This approach allows stored values to be decrypted offline if the encrypted data are obtained...
EUVD-2023-60236
D-Link DSL-124 ME1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing...
CVE-2023-53974 D-Link DSL-124 ME_1.00 Backup Configuration File Disclosure via Unauthenticated Request
D-Link DSL-124 ME1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing...
EUVD-2020-0560
Malware in sbrugna...
EUVD-2019-10420
Malware in sbrugna...
EUVD-2019-3206
Malware in sbrugna...
EUVD-2005-3719
Malware in sbrugna...
EUVD-2022-27954
Malicious code in bioql PyPI...