Results
90,429· Page 496/1809An insufficient check allowed for the overwrite of arbitrary files via a symlink.
The affected products are missing authentication for a critical function, which could allow an attacker to run as root a
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FT
The affected products are missing authorization on state-changing CGIs and session checks are not performed.
The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding toke
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTT
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1
emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the `http_poll` C2 transport acc
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbou
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video up
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with
Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control
A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untag
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbir
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety viol
Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a crafted POST request i
miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downg
Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTTP/2 read loop parses a frame’s
The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decomp
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags.
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in the client address field.
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Support
Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is aff
Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is aff
Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is aff
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported ve
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Su
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Com
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Com
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Com
Test your stack for 2026issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.