Lucene search
+L

2864 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/09 12:00 a.m.•7 views

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to deficiencies in authentication procedures, allows attackers to elevate their privileges to the level of system administrators.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to that of a system administrator...

9.1CVSS6.4AI score0.00495EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/09 12:00 a.m.•6 views

The vulnerability in the software for secure file sharing and transmission of SolarWinds Serv-U, related to bypassing authentication using a user-controlled key, allows attackers to gain access to the account.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the account...

9.1CVSS6.3AI score0.00621EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/09 12:00 a.m.•9 views

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key, enabling them to execute arbitrary code.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...

9.1CVSS7.2AI score0.00786EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/09 12:00 a.m.•7 views

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key. This enables attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor to elevate their privileges and execute arbitrary code as the root...

9.1CVSS7.1AI score0.00786EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/09 12:00 a.m.•8 views

The vulnerability of the SolarWinds Serv-U secure file sharing and transmission software, related to access control deficiencies, allows a perpetrator to execute arbitrary code as the root user.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on behalf of the root user remotely...

9.1CVSS7.3AI score0.00786EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/09 12:00 a.m.•7 views

The vulnerability of the SolarWinds Serv-U secure file sharing and transmission software, related to bypassing authentication using a user-controlled key, allows attackers to elevate their privileges to the level of system administrators.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an attacker, operating remotely, to elevate their privileges to that of a system...

9.1CVSS6.3AI score0.02134EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/09 12:00 a.m.•7 views

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication by using a user-controlled key, enabling them to execute arbitrary code.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...

9.1CVSS7.2AI score0.00786EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/09 12:00 a.m.•7 views

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U, related to deficiencies in authentication procedures, allows a perpetrator to execute arbitrary code under the root user’s identity.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on behalf of the root user remotely...

9.1CVSS7.3AI score0.00577EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/09 12:00 a.m.•5 views

The vulnerability in the software for secure file sharing and transmission of SolarWinds Serv-U allows attackers to bypass authentication using a user-controlled key, enabling them to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an intruder to enhance their privileges and gain unauthorized access to protected...

9.1CVSS6.3AI score0.00495EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/08 9:18 p.m.•7 views

CVE-2026-79588

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

4.3CVSS0.00152EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2026/09/08 5:57 p.m.•8 views

Semaphore U: OS Command Injection

Summary An OS command injection in repository giturl handling lets any user holding the Manager or Owner role on any project the normal project-collaborator roles achieve remote code execution on the Semaphore server host. Using git's --upload-pack= option, an attacker runs arbitrary commands. Th...

9.9CVSS6.3AI score0.0065EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2026/09/08 5:57 p.m.•11 views

GHSA-XP7J-H7JC-4W8P Semaphore U: OS Command Injection

Summary An OS command injection in repository giturl handling lets any user holding the Manager or Owner role on any project the normal project-collaborator roles achieve remote code execution on the Semaphore server host. Using git's --upload-pack= option, an attacker runs arbitrary commands. Th...

9.9CVSS6.4AI score0.0156EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•21 views

PT-2026-88450

🔴 CISA flags hardcoded credential flaw in CareCam Pro IP cameras deployed globally ANJIA AJL33PC0801 IP camera firmware linuxlinux202008261138 svn13796, U-Boot 2010.06 compiled Aug 26 2020 contains hardcoded bootloader credentials. An attacker with physical access can exploit CVE-2026-85083 to ga...

7CVSS5.6AI score0.00294EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/08 12:00 a.m.•14 views

CVE-2026-79588

The U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to the Cleartext transmission of administration credentials over HTTP . This security weakness allows for the potential interception of sensitive login information during transit. No specific remediation steps, exploit links, or affected componen...

5.7AI score0.00152EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•0 views

CVE-2026-79588: Cleartext Transmission of Sensitive Information

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

4.3CVSS5.7AI score0.00152EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-79588

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

5.7AI score0.00152EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/09/08 12:00 a.m.•8 views

EUVD-2026-74263

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

5.7AI score0.00152EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/09/08 12:00 a.m.•27 views

CVE-2026-79588

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

0.00152EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•24 views

PT-2026-88464

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

5.7AI score0.00152EPSS
SaveExploits1References2
NVD
NVD
•added 2026/09/07 1:20 p.m.•7 views

CVE-2026-86431

league/commonmark thephpleague/commonmark versions = 2.7.0 and 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute name with a single U+000C form feed byte e.g. \x0Conclick="alert1" bypasses the AttributesHelper::filterAttributes 'on' event-handle...

7.2CVSS0.00388EPSS
SaveExploits1References3
Rows per page
Query Builder