Astra Linux – Vulnerability in Ansible

A flaw was identified in the use of insufficiently random values in Ansible. Two random password lookups of the same length result in the generation of the same value as the template caching action for the same file, since no re-evaluation occurs. The greatest risk posed by this vulnerability is...

PT-2026-31240

Missing Authorization vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinpoint Booking System: from n/a through = 2.9.9.6.5...

CVE-2026-32968

Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the commb24sysapi module, resulting in full system compromise. This vulnerability is a variant attack for CVE-2020-10383...

CVE-2025-68010

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in netgsm Netgsm netgsm allows Reflected XSS.This issue affects Netgsm: from n/a through = 2.9.63...

CVE-2025-29630

creationtimestamp| type| source ---|---|--- 2025-07-04 21:00:04+00:00| published-proof-of-concept| Telegram/OollRHxvoptfGlV2c1gbdC6jSDWMy1y9qQszI5U7KKS9Kqc...

autMan 安全漏洞

autMan is a powerful automation software system from autMan, Inc. A security vulnerability exists in autMan version v2.9.6, which stems from a vulnerability that allows an attacker to bypass authentication via a crafted Web request...

Tormach PathPilot Controller 安全漏洞

Tormach PathPilot Controller is a series of controllers from Tormach USA. A security vulnerability exists in Tormach PathPilot Controller version v2.9.6. An attacker exploiting this vulnerability could overwrite a hard-coded IP address in the device's memory, thereby disrupting the network...

Tormach PathPilot Controller 安全漏洞

Tormach PathPilot Controller is a series of controllers from Tormach USA. A security vulnerability exists in Tormach PathPilot Controller version v2.9.6. An attacker exploited the vulnerability to erase critical sectors of flash memory, causing the machine to lose network connectivity and suffer...

WordPress Plugin Welcart e-Commerce Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2023-46198

Cross-Site Request Forgery CSRF vulnerability in Scientech It Solution Appointment Calendar plugin = 2.9.6 versions...

CVE-2023-29681

Cleartext Transmission in cookie:ecospw: in Tenda N301 v6.0, firmware v12.03.01.06pt allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password...

UBUNTU-CVE-2022-48279

In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity C language codebase...

DEBIAN-CVE-2020-10729

A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords a...

PT-2021-5807

Name of the Vulnerable Software and Affected Versions Ansible Engine versions prior to 2.9.6 Description A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file...

An unspecified vulnerability exists in Ansible (CNVD-2020-19559)

Ansible is a computer system configuration manager from the American company Ansible. The product can be used to publish, manage and orchestrate computer systems.Ansible Engine is one of the Ansible Engines. A security vulnerability exists in Ansible Engine versions 2.7.17 and earlier, 2.8.9 and...

cPanel Security Feature Issue Vulnerability (CNVD-2019-29623)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 60.0.25 that stems from the program not enforcing feature list...