2905 matches found
EUVD-2026-117886
A server-side request forgery SSRF vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient validation of user-supplied URL and network parameters. A remote attacker could exploit this issue to induce the server to send requests to arbitrary internal or external...
CVE-2026-119433
A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace . The flaw stems from insufficient validation of network parameters and URLs supplied by users. A remote attacker could leverage this to force the server to make requests to arbitrary inte...
KevinLAB BEMS (Building Energy Management System) - Backdoor Account
KevinLAB BEMS has an undocumented backdoor account, and these sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the solution through the RMI. An attacker could exploit this vulnerability by logging in using the backdoor account with highes...
CVE-2026-119433: Foxit Software Inc. Foxit Workspace: A server-side request forgery (SSRF) vulnerability exists in an undocumented API endpoint of Foxit Workspace due to…
A server-side request forgery SSRF vulnerability exists in an undocumented API endpoint of Foxit Workspace due to insufficient validation of user-supplied URL and network parameters. A remote attacker could exploit this issue to induce the server to send requests to arbitrary internal or external...
exploithosting
This repository does not have a README...
Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and IBM Storage Scale System and the Management GUI are now fixed in 5.2.3.9/6.2.3.7 or higher and 6.0.1.1/7.0.1.1 or higher
Summary The following vulnerabilities, which can affect IBM Storage Scale and the Management GUI and could provide weaker-than-expected security, are now fixed in Storage Scale 5.2.3.9 or higher and 6.0.1.1 or higher and IBM Storage Scale System 6.2.3.7 or higher and 7.0.1.1 or higher...
cve-2015-3224
This repository does not have a README...
CVE-2021-21300
This repository does not have a README...
CVE-2024-38077
This repository does not have a README...
vulnerability-CVE-2013-3900
This repository does not have a README...
RailroadBandit
This repository does not have a README...
scan_CVE-2020-29583
Scanner for Zyxel products which are vulnerable due to an undocumented user account CVE-2020-29583 Vuln details: https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html But I'm not sure if it's really possible to login with zyfwp via the web interface? Any reports would be...
cve-2018-6574
This repository does not have a README...
Version_Vulnerability_Scanner
This repository does not have a README...
CVE-2026-31431-Copy-Fail
This repository does not have a README...
CVE-2024-45590
This repository does not have a README...
cve-2018-6574
This repository does not have a README...
oo
This repository does not have a README...
esp32-cve-2025-27840-power-trace-experiment
esp32-cve-2025-27840-power-trace-experiment Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth commands CVE-2025-27840. When the ESP32 receives the commands, it toggles a GPIO pin to trigger the power trace...