198628 matches found
Cisco ASA Improper Input Validation (CVE-2022-20715)
A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to...
MiracleLinux 8 : nodejs:24 (AXSA:2026-1972:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1972:01 advisory. undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation CVE-2026-85152 undici: undici: TLS certificat...
Cisco ASA Missing Authorization (CVE-2025-20362)
Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial...
Access Control Bypass vulnerability in the RBAC validation engine of Brocade Fabric OS
| Summary: An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permissi...
PT-2026-106746
Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...
Cisco ASA URL Redirection to Untrusted Site (CVE-2023-20264)
A vulnerability in the implementation of Security Assertion Markup Language SAML 2.0 single sign-on SSO for remote access VPN in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to intercept the SAML...
Cisco ASA Stack-based Buffer Overflow (CVE-2021-40118)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...
PT-2026-106713
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...
Cisco ASA/FTD Incorrect Authorization (CVE-2020-3578)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access rule and access parts of the WebVPN portal that are supposed to be blocked...
Cisco ASA Stack-based Buffer Overflow (CVE-2021-34704)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition. This vulnerability is due to improper input validation when...
Cross-Virtual-Fabric Context Switching and Horizontal Privilege Escalation in Brocade Fabric OS
: An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in one Virtual Fabric can exploit this issue by submitting a specially crafted request containing an arbitrary...
Cisco ASA Improper Input Validation (CVE-2020-3191)
A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reload, resulting in a denial of service DoS condition. The...
CVE-2026-66908
CVE-2026-66908 — camel-platform-http-main JWT iss/aud 검증 누락 Apache Camel 취약점에 대한 실행 가능한 개념 증명PoC 재현기입니다. camel-main 임베디드 HTTP 서버 는 jwtIssuer도 jwtAudience도 구성되지 않은 경우 키스토어만으로 JWT 인증기를 구축하므로, 수신 토큰은 서명과 만료 여부만 검사됩니다 — iss 및 aud 클레임은 전혀 검증되지 않습니다. 런타임| 디렉터리| 스택 ---|---|--- Camel Main독립 실행형|...
CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass
CVE-2026-49230 — Обход аутентификации Apache APISIX jwe-decrypt Доказательство концепции обхода аутентификации в плагине Apache APISIX jwe-decrypt. Плагин расшифровывает JWE-токен и передает его открытый текст в вышестоящий сервис upstream, выступая в роли шлюза аутентификации — но он никогда не...
EUVD-2026-78300
proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet...
adaPwn
adaPwn - CVE-2019-14912 PoC adAS OPENSSO 모듈이 리다이렉트할 도메인을 올바르게 검증하지 않아, 사용자를 공격자가 제어하는 웹사이트로 리다이렉트하고, 그의 adAS 세션 쿠키를 탈취할 수 있습니다. 사용법 usage: adaPwn.py -h --interface INTERFACE --httpPort HTTPPORT --dnsPort DNSPORT ipToSpoof realIP redirectUrl ipBlacklist ipBlacklist...
CVE-2023-43144
CVE-2023-43144 설명 Assets Management System 1.0은 delete.php의 id 매개변수를 통해 SQL 인젝션에 취약합니다. PoC sqlmap -u 'http://localhost/delete.php?id=4' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch 코드 검토 delete.php ?php include 'core/init.php'; $id = $GET'id'; deletedata$con,$id;...
CVE-2024-36401-GeoServer-RCE
RCE-уязвимость в GeoServer CVE-2024-36401 - скрипт обнаружения CVE-2024-36401 — это критическая уязвимость безопасности, затрагивающая GeoServer, сервер с открытым исходным кодом для обмена геопространственными данными, и GeoTools, библиотеку Java с открытым исходным кодом, предоставляющую...
CVE-2023-38890
CVE-2023-38890 Описание Проект Online Shopping Portal версии 3.1 позволяет удаленным злоумышленникам выполнять произвольные SQL-команды/запросы через форму входа, что приводит к несанкционированному доступу и возможному манипулированию данными. Эта уязвимость возникает из-за недостаточной проверк...