CVE-2025-70545

Roteador PPC Belden ONT 2K05X Autor : Jeyabalaji Código do Produto Afetado: PPC 2K05X Router - V1.1.9206L Testado em : Windows 11 CVE : CVE-2025-70545 Descrição: Existe uma vulnerabilidade de cross-site scripting XSS armazenada na interface de gerenciamento web do roteador PPC Belden ONT 2K05X...

CVE-2025-55182_Vulnerable-Application

CVE-2025-55182 असुरक्षित प्रयोगशाला आधुनिक वेब फ्रेमवर्क में सुरक्षा कमजोरियों को प्रदर्शित करने के लिए असुरक्षित रिएक्ट सर्वर कम्पोनेंट्स का उपयोग करने वाली शैक्षणिक परीक्षण प्रयोगशाला। ⚠️ महत्वपूर्ण अस्वीकरण यह एप्लिकेशन जानबूझकर असुरक्षित है और इसे केवल नियंत्रित वातावरण में शैक्षणिक उद्देश्यों...

CVE-2026-94585

Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform are susceptible to an authentication bypass vulnerability in the web management interface. A network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative ac...

EUVD-2026-94731

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On SSO workflow to gain...

CVE-2026-94585

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On SSO workflow to gain...

CVE-2026-94585

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint within the Single Sign-On SSO workflow to gain...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 are vulnerable to a persistent Denial of Service (DoS) . The flaw exists because the system directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configu...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

EUVD-2026-94735

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-94584

A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across a multi-threaded execution pool, this race condition causes PAM modules to process stale or incorrect client IP...

CVE-2026-94575

A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control RBAC checks under specific environmental conditions. Successful exploitation lowers the system authorization mode for t...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. The flaw occurs because the service fails to verify the identity or authenticity of the sending process when processing local inter-process communication (...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

EUVD-2026-94743

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication IPC storage callbacks, the service accepts and registers session structures including administrative role...

CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection

CVE-2026-26898: Roteador Xiaomi Mi 4A Gigabit - SSRF via Injeção de Cabeçalho Host -orange Resumo Existe uma vulnerabilidade de Server-Side Request Forgery SSRF no Roteador Xiaomi Mi 4A Edição Gigabit. A interface web do roteador não valida o cabeçalho HTTP Host, permitindo que um atacante não...

CVE-2020-1938

घोषणा: सभी साइबर सुरक्षा उपकरणों का उपयोग राष्ट्रीय कानूनों, उद्योग मानकों एवं लक्ष्य प्रणाली के प्रासंगिक नियमों का पालन करते हुए किया जाना चाहिए; इनका उपयोग किसी भी अवैध गतिविधि या दूसरों के वैध अधिकारों के उल्लंघन के लिए नहीं किया जाना चाहिए। उपयोगकर्ताओं को यह समझना चाहिए कि कोई भी उपकरण पूर्...

even-you-brutus

तुम भी, ब्रूटस? तुम भी, ब्रूटस? एक सरल proof of concept डिक्शनरी ब्रूट फोर्सिंग टूल है जो MikroTik RouterOS 6.x वेब इंटरफ़ेस को लक्षित करता है। RouterOS में वेब और winbox इंटरफ़ेस पर ब्रूट फोर्स सुरक्षा का उल्लेखनीय अभाव है। उन्होंने काफी हद तक अपनी कस्टम authentication/encryption योजनाओं के आधार...

CVE-2026-87678

An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication FA, the system fails to sanitize the Identity Provider IdP issuer parameter. An authenticated administrator—or an...