117119 matches found
Kubernetes Dashboard <1.10.1 - Authentication Bypass
Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. id: CVE-2018-18264 info: name: Kubernetes Dashboard 1.10.1 - Authentication Bypass author: edoardottt severity: high description: | Kubernetes...
Hikvision IP ping.php - Command Execution
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondataip with the input netstat -ano leads to os command injection...
Artica Proxy Community Edition <4.30.000000 - Local File Inclusion
Artica Proxy Community Edition before 4.30.000000 is vulnerable to local file inclusion via the fw.progrss.details.php popup parameter. id: CVE-2020-13158 info: name: Artica Proxy Community Edition 4.30.000000 - Local File Inclusion author: 0xAkoko severity: high description: Artica Proxy Communi...
Ulterius Server < 1.9.5.0 - Directory Traversal
Ulterius Server before 1.9.5.0 allows HTTP server directory traversal via the process function in RemoteTaskServer/WebServer/HttpServer.cs. id: CVE-2017-16806 info: name: Ulterius Server 1.9.5.0 - Directory Traversal author: geeknik severity: high description: Ulterius Server before 1.9.5.0 allow...
nextssrf
╔══════════════════════════════════════════════════════════════╗ ║ NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF ║ ║ Affected: 13.4.13 → 15.5.15, 16.0.0 → 16.2.4 ║ ║ @mitsec / ynsmroztas — Bug Bounty Tooling ║...
salt-shellshock
====================== shellshock bash update This recipe tries to upgrade bash from OS pkg, and falls back to compile bash on systems with no update available. Works for us on old ubuntu/debian. Bash install script from:...
wordpress-upgrade-check
wordpress-upgrade-check Read-only check of the WordPress core version of every site on a server , with the fix table for CVE-2026-87902 critical, unauthenticated; fixed in WordPress 7.1.2 on 2026-09-22 and backported to every branch down to 4.7. For web agencies and admins who look after many...
cve-2022-42889-jmeter
CVE 2022-42889 This script is for removing the older version of Apache Commons Text 1.9 and replaces it with the newer version 1.10.0 in JMETERHOME/lib folder...
CLSA-2026-1792208771 TuxCare security update for @angular/upgrade (20 CVEs)
TuxCare rebuilt @angular/upgrade to address 20 CVEs. Fixed in 16.2.11-tuxcare.1...
CLSA-2026-1792208774 TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 7.2.16-tuxcare.10...
CLSA-2026-1792208637 TuxCare security update for @angular/upgrade (2 CVEs)
TuxCare rebuilt @angular/upgrade to address 2 CVEs. Fixed in 8.0.3-tuxcare.2...
CLSA-2026-1792208578 TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 10.1.0-tuxcare.1...
CLSA-2026-1792208577 TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 4.3.5-tuxcare.1...
CLSA-2026-1792208576 TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 15.2.2-tuxcare.1...
CLSA-2026-1792208574 TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 14.2.12-tuxcare.1...
CLSA-2026-1792208575 TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 18.2.12-tuxcare.1...
CLSA-2026-1792208573 TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 18.1.2-tuxcare.1...
CLSA-2026-1792208551 TuxCare security update for @angular/upgrade (2 CVEs)
TuxCare rebuilt @angular/upgrade to address 2 CVEs. Fixed in 13.3.11-tuxcare.2...