Lucene search
+L
Bdu FstecRecent

96144 matches found

BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•11 views

The vulnerability of the mod_proxy_ajp() module in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modproxyajp module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

10CVSS6AI score0.01631EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•11 views

Vulnerability of the adbd_tls_verify_cert() function in the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the adbdtlsverifycert function in the Android operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS6AI score0.00541EPSS
SaveExploits13References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•11 views

The vulnerability of the Python programming language interpreter, which allows attackers to compromise data integrity

The vulnerability of the Python interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability allows an attacker operating remotely to compromise data integrity...

7.8CVSS6.3AI score0.00625EPSS
SaveExploits0References20Affected Software8
BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•11 views

The vulnerability of the /etc/skel component in Demon allows for triggering of a service failure by other applications called Oddjob. This enables a hacker to cause a service failure.

The vulnerability of the /etc/skel component in the demon is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

6.3CVSS6.7AI score0.00293EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•30 views

The vulnerability of the IntraService customer interaction system, related to the, allows a perpetrator to execute a CSRF attack.

The vulnerability of the IntraService customer interaction system is related to the falsification of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

7.8CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•13 views

The vulnerability of the iSimpleBank digital service platform, related to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary codes.

The vulnerability of the iSimpleBank digital service platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

8.5CVSS6AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•12 views

The vulnerability of the InterestGroups component in the Google Chrome browser allows a hacker to elevate their privileges and execute arbitrary code.

The vulnerability of the InterestGroups component in the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

5CVSS8.3AI score0.003EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•13 views

The vulnerability of Google Chrome’s DevTools component allows a hacker to bypass security restrictions.

The vulnerability of Google Chrome’s DevTools component is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions through a specially created HTML page...

5CVSS5.7AI score0.00237EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•13 views

The vulnerability of the Aura component in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Aura component in Google Chrome browsers relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code with system privileges from outside the browser, through a specially created HTML pag...

8.3CVSS8.4AI score0.00281EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•14 views

The vulnerability of Google Chrome’s graphics processor allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s graphics processor is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.3CVSS7.5AI score0.00281EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•12 views

The vulnerability of the Password component in the Google Chrome browser allows a hacker to redirect users to a malicious web page.

The vulnerability of the Password component in Google Chrome browser relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to redirect users to malicious web pages...

10CVSS7.9AI score0.00365EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•12 views

The vulnerability of the Jenkins GitHub plugin, related to the lack of protection for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Jenkins GitHub plugin is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

9CVSS5.9AI score0.00495EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/08 12:00 a.m.•20 views

The vulnerability of the mod_md module in the Apache HTTP Server, related to pointer manipulation, allows attackers to trigger resource exhaustion or server failures.

The vulnerability of the modmd module in the Apache HTTP Server is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause resource exhaustion or server failures...

10CVSS7.3AI score0.01068EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•13 views

The vulnerability of the USB HID protocol analyzer, a network traffic analyzer for computer networks, allows a hacker to cause a service failure.

The vulnerability of the USB HID protocol analyzer, a network traffic analyzer for computer networks, Wireshark, is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.9AI score0.00159EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•11 views

The vulnerability of SMB2 protocol discoverer, the Wireshark network traffic analyzer, allows a hacker to cause a service failure.

The vulnerability of SMB2 protocol analyzer in Wireshark is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.8AI score0.00139EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•12 views

The vulnerability of the decrypt_data() function in the ZigBee protocol analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the decryptdata function in the Kismet protocol of the Wireshark network traffic analyzer involves buffer overflow in the stack. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6AI score0.00159EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•11 views

The vulnerability of the dissect_beep_tree() function in the BEEP protocol analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the dissectbeeptree function in the BEEP protocol analyzer for computer network traffic analysis tool Wireshark is related to the execution of a loop with a potentially overflowing buffer in the stack. Exploiting this vulnerability can allow attackers to cause service failure...

5.5CVSS6.1AI score0.00159EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•10 views

The vulnerability of the dissect_swils_zone_obj() function in the FC-SWILS protocol of the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the dissectswilszoneobj function in the FC-SWILS protocol of the Wireshark network traffic analyzer is related to uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.8AI score0.00159EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•12 views

The vulnerability of the SafeEmailFilter() function (/goform/SafeEmailFilter) in the Tenda F456 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the SafeEmailFilter function /goform/SafeEmailFilter of the Tenda F456 router software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

9CVSS7.7AI score0.01009EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•14 views

The vulnerability of the fromP2pListFilter() function (/goform/P2pListFilter) in the Tenda F456 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromP2pListFilter function /goform/P2pListFilter of the Tenda F456 router’s software lies in the copying of buffers without checking the size of the input data when processing parameters for manufacturer and Go. Exploiting this vulnerability could allow an attacker to...

9CVSS7.7AI score0.01009EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•11 views

The vulnerability of the fromSafeClientFilter() function (/goform/SafeClientFilter) in the Tenda F456 router software allows a attacker to execute arbitrary code or cause service failures.

The vulnerability of the fromSafeClientFilter function /goform/SafeClientFilter in the Tenda F456 router microprogramming system is related to the copying of buffers without checking the size of the input data when processing parameters menufacturer and Go. Exploiting this vulnerability allows a...

9CVSS7.8AI score0.01009EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•11 views

The vulnerability of the fromSafeMacFilter() function (/goform/SafeMacFilter) in the Tenda F456 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromSafeMacFilter function /goform/SafeMacFilter of the Tenda F456 router microprogramming system is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability can allow an attacker to...

9CVSS7.7AI score0.01009EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•11 views

The vulnerability of the codec_sbcdecode() function in the SBC analyzer of the Wireshark computer network analysis tool allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the codecsbcdecode function in the SBC analyzer of Wireshark, a computer network analysis tool, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to cause service failures or execute arbitrary code...

7.8CVSS6.6AI score0.00188EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•12 views

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition (EE) stems from the lack of authentication for a critical function, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protecte...

7.8CVSS5.8AI score0.00459EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•11 views

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition (EE) involves authentication errors, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

3.7CVSS5.8AI score0.00186EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•15 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the lack of protective measures for website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS6.1AI score0.00295EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•11 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the manipulation of inter-site requests, allows a hacker to execute arbitrary commands.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

10CVSS6AI score0.00259EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•15 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

4.3CVSS5.8AI score0.00325EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•18 views

The vulnerability of the fromP2pListFilter() function (/goform/P2pListFilter) in the HTTP server software for Tenda F456 routers allows a hacker to execute arbitrary commands.

The vulnerability of the FromWriteFacMac function /goform/WriteFacMac in the httpd microprogramming software for Tenda F456 routers is related to the lack of measures to sanitize input data when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute...

9CVSS6.9AI score0.06467EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•10 views

The vulnerability of the spotlight_dissect_query_loop() function in the AFP Spotlight protocol analyzer for computer network traffic analysis tools by Wireshark allows a hacker to induce a service failure.

The vulnerability of the spotlightdissectqueryloop function in the AFP protocol analyzer Spotlight, a traffic analysis tool for computer networks developed by Wireshark, is related to an uncontrolled recursion. Exploiting this vulnerability could allow attackers to cause service failures...

5.5CVSS5.8AI score0.00139EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•10 views

The vulnerability of the dissect_icmpv6_nd_opt() function in the ICMPv6 protocol analyzer for computer network traffic analysis tool Wireshark allows a hacker to cause a service failure.

The vulnerability of the dissecticmpv6ndopt function in the ICMPv6 protocol analyzer for computer network traffic analysis tool Wireshark is related to an uncontrolled recursion. Exploiting this vulnerability could allow a attacker to cause service interruptions...

5.5CVSS5.8AI score0.00139EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•11 views

The vulnerability of the dissect_rpkirtr_pdu() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the dissectrpkirtrpdu function in the Wireshark network traffic analyzer is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.9AI score0.00141EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•15 views

The vulnerability of MySQL protocol discrivers and traffic analyzers for computer networks by Wireshark allows attackers to cause service failures.

The vulnerability of the MySQL protocol analyzer and traffic analyzer for computer networks by Wireshark is related to access to an uninitialized pointer. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.9AI score0.00141EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•14 views

The vulnerability of the k12_dump_src_setting() function in the K12 file parser and RF5 traffic analyzer software from Wireshark allows a hacker to cause service interruptions.

The vulnerability of the k12dumpsrcsetting function in the K12 file parser and the RF5 traffic analyzer of Wireshark allows for buffer copying without checking input data. Exploiting this vulnerability can enable a hacker to cause service failures...

5.5CVSS5.9AI score0.00136EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•15 views

The vulnerability of the rdp8_decompress_segment() function in the RDP protocol allows a hacker to cause a service failure. This vulnerability exists in the Wireshark network traffic analyzer software.

The vulnerability of the rdp8decompresssegment function in the RDP protocol analysis tool for computer network traffic analysis in Wireshark is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause service failur...

7.8CVSS6.3AI score0.00188EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•22 views

The vulnerability of the fromSetIpBind() function (/goform/SetIpBind) in the httpd microprogramming software for Tenda F456 routers allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSetIpBind function /goform/SetIpBind in the HTTPD microprogramming software for Tenda F456 routers is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could allow an attacke...

9CVSS7.7AI score0.01009EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•10 views

The vulnerability of the WiresharkZipHelper::unzip() function in the configuration profile of the computer network analysis device Wireshark allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the WiresharkZipHelper::unzip function in the configuration profile of the computer network analysis device’s interface is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a attacker to cause service...

7.8CVSS6.3AI score0.0018EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•17 views

The vulnerability of the WebSocket protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the WebSocket protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, is related to improper management of sequential memory allocation. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.8AI score0.00139EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•13 views

The vulnerability of the GNW protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the GNW protocol analyzer, a component of the Wireshark computer network traffic analyzer, lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6AI score0.00141EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•12 views

The vulnerability of the dissect_controloption_value() function in the SANE protocol analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the dissectcontroloptionvalue function in the SANE protocol analyzer, Wireshark, for analyzing computer network traffic, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.9AI score0.00165EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•17 views

The vulnerability of the dissect_bencoded_list() function in the BT-DHT protocol analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the dissectbencodedlist function in the BT-DHT protocol analyzer of Wireshark, a computer network traffic analyzer, is related to uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.8AI score0.00165EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•14 views

The vulnerability of the DLMS/COSEM protocol analyzer of the Wireshark computer network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the DLMS/COSEM protocol implementation in the Wireshark network traffic analyzer involves executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6AI score0.00159EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•16 views

The vulnerability of the zlib compression library in Wireshark, a network traffic analyzer, allows attackers to cause service interruptions.

The vulnerability of the zlib compression library, the traffic analyzer for computer networks like Wireshark, is related to the execution of a loop with improper memory management, leading to sequential memory allocation issues. Exploiting this vulnerability can allow attackers to cause service...

5.5CVSS5.9AI score0.00157EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•8 views

The vulnerability in the packet-kismet.c script of the Kismet protocol allows a hacker to cause a service failure. This vulnerability is exploited by hackers to disrupt the functioning of Kismet, a network traffic analyzer tool used in Wireshark.

The vulnerability in the packet-kismet.c script of the Kismet protocol, a traffic analyzer for computer networks developed by Wireshark, involves allowing the operation to escape out of the buffer and into memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00172EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•12 views

The vulnerability in the packet-gsm_a_rp.c script of the GSM RP protocol analyzer for computer network traffic analysis tool Wireshark allows a hacker to cause a service failure.

The vulnerability in the packet-gsmarp.c script of the GSM RP protocol analyzer for computer network traffic analysis tool Wireshark relates to access to an uninitialized pointer. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.8AI score0.00139EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•12 views

The vulnerabilities of the functions dissect_smb2_notify_data_out() and dissect_smb2_file_full_ea_info() in the SMB2 protocol analyzer tool Wireshark allow a hacker to cause service failures.

The vulnerabilities of the functions dissectsmb2notifydataout and dissectsmb2filefulleainfo in the SMB2 protocol analyzer tool Wireshark involve executing a loop with an unreachable exit condition. Exploiting these vulnerabilities can allow attackers to cause service failures...

5.5CVSS5.8AI score0.00159EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•12 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the ability to bypass authentication by using an alternative path or channel. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to...

8.5CVSS5.8AI score0.0049EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/07 12:00 a.m.•15 views

The vulnerability of the software platform based on Git for collaborative code development in GitLab Enterprise Edition (EE) arises from the lack of measures taken to protect the structure of web pages. This allows attackers to add email addresses to target accounts.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to remotely add email addresses to target...

5.5CVSS5.8AI score0.00333EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/06 12:00 a.m.•13 views

The vulnerability of the loginauth() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK N300RH router’s microprogramming system allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the loginauth function in the cgi-bin/cstecgi.cgi script of the TOTOLINK N300RH router’s microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the password parameter stored in variable v10. Exploiting this...

10CVSS7.8AI score0.0102EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/06 12:00 a.m.•20 views

The vulnerability of the mod_authn_socache module in the Apache HTTP Server allows a hacker to trigger a service failure.

The vulnerability of the modauthnsocache module in the Apache HTTP Server is related to pointer dereferencing. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

5.3CVSS6.3AI score0.01202EPSS
SaveExploits0References7Affected Software3
Total number of security vulnerabilities96144