Navigate CMS 2.9.4 - Server-Side Request Forgery

Navigate CMS 2.9.4 is susceptible to server-side request forgery via feedparser class. This can allow a remote attacker to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter, thus enabling possible theft of sensitive information, data...

CVE-2026-71933

Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save...

EUVD-2026-64992

Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save...

PT-2026-80967

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description Multiple syslog functions lack proper authorization checks, allowing a remote attacker to perform unauthorized operations. By sending crafted requests, an attacker can modify the...

CVE-2026-73371

Joomla! Core - 20260808 - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform copy batch operations on uneditable items...

CVE-2021-22772

A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T200 Modbus SC2-04MOD-07000100 and earlier, Easergy T200 IEC104 SC2-04IEC-07000100 and earlier, and Easergy T200 DNP3 SC2-04DNP-07000102 and earlier that could cause unauthorized operation when authentication ...

WordPress plugin “Hide Category by User Role for WooCommerce” has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

IBM App Connect Enterprise security vulnerabilities

IBM App Connect Enterprise is an operating system from International Business Machines IBM.IBM App Connect Enterprise combines existing industry-trusted IBM Integration Bus technology with IBM App Connect Professional and new cloud-native IBM App Connect Enterprise combines existing...

EUVD-2020-11784

Malware in sbrugna...

EUVD-2021-9907

Malicious code in bioql PyPI...

EUVD-2025-18369

Malicious code in bioql PyPI...

Maka GPS Marbella KR8s security vulnerabilities

Maka GPS Marbella KR8s is a car recorder from Maka GPS Singapore. A security vulnerability exists in Maka GPS Marbella KR8s version 2.0.8, which originates from an unauthorized operation on port 7777...

CVE-2025-6172

Permission vulnerability in the mobile application com.afmobi.boomplayer may lead to the risk of unauthorized operation...

CVE-2025-6172

Permission vulnerability in the mobile application com.afmobi.boomplayer may lead to the risk of unauthorized operation...

CVE-2025-6172

A permission vulnerability exists in the com.afmobi.boomplayer mobile application, which is developed by Transfon (TECNO) . The root cause stems from improper privilege management (CWE-287), which could allow an attacker to perform unauthorized operations . While specific affected versions are no...

CVE-2025-6172: Improper Authentication

Permission vulnerability in the mobile application com.afmobi.boomplayer may lead to the risk of unauthorized operation...

Controller Code Upload Detected (Medium)

An upload of the controller code has been detected over the network. When not part of regular operations, a code upload can be used to gather information about the controller behavior as part of reconnaissance activity. This plugin only works with Tenable.ot. Please visit...

Controller Code Upload Detected (Critical)

An upload of the controller code has been detected over the network. When not part of regular operations, a code upload can be used to gather information about the controller behavior as part of reconnaissance activity. This plugin only works with Tenable.ot. Please visit...

Fortinet FortiNDR Cross-Site Request Forgery Vulnerability

Fortinet FortiNDR is a network detection and response solution from Fortinet, Inc. A cross-site request forgery vulnerability exists in Fortinet FortiNDR, which stems from a cross-site request forgery that could lead to the execution of an unauthorized operation. The following versions are...

Kashipara Hotel Management System Access Control Error Vulnerability

Kashipara Hotel Management System is a hotel management system from Kashipara. An access control error vulnerability exists in Kashipara Hotel Management System v1.0 that can be exploited by an attacker to cause unauthorized operation...