Switchvox pa endpoint SQL injection

Added: 09/02/2026 CVE: CVE-2026-9586 Background Switchvox is a VoIP and Unified Communications phone system. Problem An SQL injection vulnerability exposed by the unauthenticated /pa endpoint could allow a remote attacker to execute arbitrary commands. Resolution Upgrade to Switchvox 8.4.0.2 or...

Zimbra Collaboration Suite SNMP notification vulnerability

Added: 08/24/2026 Background Zimbra Collaboration Suite is an email, calendar, and collaboration solution for enterprises. Problem A vulnerability in Zimbra Collaboration Suite with SNMP notifications enabled could allow a remote attacker to execute arbitrary commands. Resolution Upgrade to Zimbr...

PHP Remote File Inclusion

Added: 01/28/2010 Background PHP scripts support the include and require statements, which cause an outside script to be run within the calling script. The included script can be a local file or, in some configurations, the URL of a remote file. Problem The PHP script is vulnerable to a remote fi...

Oracle Database password weakness

Added: 05/12/2009 Background Oracle Database is a relational database solution available for multiple platforms. Problem The Oracle Database service has accounts with default or easily guessed passwords, which could allow an attacker to make unauthorized SQL queries. Resolution Set a strong...

SQL injection authentication bypass

Added: 01/04/2011 Background Structured Query Language SQL is the most common language understood by modern relational databases. Problem A web program uses input parameters within an SQL query in an unsafe manner. This could allow a remote attacker to manipulate the authentication query via a...

Find Metadata

Added: 06/04/2009 Background This tool searches the Internet for PDF and Microsoft Office files in the given domain, and extracts the metadata from those files. This metadata often contains the names or aliases of the document's authors or contributors, which can be used to guess valid e-mail...

Disable Firewall

Added: 11/25/2008 Background This tool attempts to disable the firewall on the target. Limitations A connection to the target is required to run this tool. The connection requires root privileges on Unix and Linux targets. Platforms Windows / Linux / Unix...

Kestra configs authentication bypass

Added: 09/04/2026 Background Kestra is open-source software for data, AI, and infrastructure workflows. Problem An authentication bypass vulnerability in the AuthenticationFilter class allows remote unauthenticated attackers to bypass authentication for any request path ending with "configs",...

Microsoft Office OCX ActiveX controls OpenWebFile program execution

Added: 01/30/2009 BID: 33243 Background Microsoft Office OCX is a suite of ActiveX document containers to create, open, edit, and print Microsoft Office files. Problem A vulnerability in multiple Office OCX ActiveX controls allows a web page to execute remote programs using the OpenWebFile method...