corsair_scan

Bienvenue sur Corsairscan Corsairscan est un outil de sécurité pour tester les mauvaises configurations de Cross-Origin Resource Sharing CORS. CORS est un mécanisme qui permet à des ressources restreintes d'une page web d'être demandées depuis un autre domaine que celui à partir duquel la premièr...

N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...

cve-2019-3396

Неавторизованное внедрение шаблона в Confluence CVE-2019-3396 I Сборка Эта ошибка возникает в следующих версиях: Все версии 1.x.x, 2.x.x, 3.x.x, 4.x.x и 5.x.x Все версии 6.0.x, 6.1.x, 6.2.x, 6.3.x, 6.4.x и 6.5.x Все версии 6.6.x до 6.6.12 Все версии 6.7.x, 6.8.x, 6.9.x, 6.10.x и 6.11.x Все версии...

CVE-2025-6713

CVE-2025-6713 élaborer un pipeline d'agrégation pour accéder à des données sans autorisation appropriée en raison d'une gestion incorrecte de $mergeCursors dans MongoDB v8.0 v7.0 v6.0 6.0.22 installation pas très difficile - utilisez simplement pip3 pour installer les dépendances : pip install -r...

CVE-2026-102584 Moodle: missing capability check allows unauthorised grade penalty recalculation

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessme...

CVE-2024-6387-OpenSSH-Analysis

Анализ CVE-2024-6387 OpenSSH Обзор Анализ безопасности уязвимости CVE-2024-6387, затрагивающей сервер OpenSSH. Используемые инструменты Kali Linux Nmap Metasploitable 2 Детали уязвимости CVE-2024-6387 — это уязвимость в OpenSSH, вызванная состоянием гонки race condition в sshd, которая может...

CVE-2026-92378

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be...

CVE-2026-92378 uniFLOW Online Legacy UI Previous login session retained when entering Reduced Function Login

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be...

CVE-2026-92378 uniFLOW Online Legacy UI Previous login session retained when entering Reduced Function Login

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be...

EUVD-2026-85153

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be...

CVE-2026-92378

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online . Under specific timing conditions during Service Offline Emergency Mode , a previously authenticated session may be retained after a user logs out. This flaw could allow a subseque...

CVE-2026-92378: Insufficient Session Expiration

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be...

CVE-2026-86585

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86585

CVE-2026-86585 affects VEO and VEO-XS Wi-Fi monitors (Fermax) in versions prior to 01.48.001 . The root cause is the lack of signature verification on firmware update packages, allowing an attacker who controls the delivery of an update to install unauthorised firmware on the device. The attack v...

EUVD-2026-80391

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86585: Improper Verification of Cryptographic Signature

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2025-56565

DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...

VulnCheck KEV: CVE-2026-86206

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4...