Search
Search HackerFeeds
Across ransomware, CVEs, defacements, breaches, and countries — last 90 days
Search
Across ransomware, CVEs, defacements, breaches, and countries — last 90 days
20 of 342 results
CVE
(10)CVE-2026-109810
SAP NetWeaver Application Server Java (Web Dynpro Java) does not sufficiently validate certain request parameters used to resolve styling resources in the appli
matched in description · 2026-11-10
CVE-2026-121825
OpenAM (OpenAM Consortium Edition) 14.0.5 and earlier contains an open redirect vulnerability (CWE-601) in the Liberty ID-FF service provider single sign-on flo
matched in description · 2026-11-09
CVE-2026-10844
IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow a remote attacker to conduct phishing attacks.
matched in description · 2026-11-08
CVE-2026-124436
OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admi
matched in description · 2026-11-08
CVE-2026-123548
OpenIdentityPlatform OpenAM before 16.1.4 contains an open redirect because WS-Federation logout, SAML v2.0 logout and name-identifier management, SAML v2.0 ide
matched in description · 2026-11-08
CVE-2026-123547
OpenAM before 16.1.4 contains an open redirect vulnerability that allows attackers to redirect users to external sites because RelayState is unchecked when no r
matched in description · 2026-11-08
CVE-2026-123546
OpenAM before 16.1.4 contains an open redirect and cross-site scripting vulnerability that allows remote attackers to control post-login and logout destinations
matched in description · 2026-11-08
CVE-2026-123541
OpenAM before 16.1.4 contains an open redirect vulnerability that allows remote attackers to redirect users after SAML 1.x single sign-on by exploiting loose tr
matched in description · 2026-11-08
CVE-2026-123529
Vikunja before 2.7.1 contains a stored CSS injection vulnerability that allows authenticated users with project write access to inject arbitrary CSS via unsanit
matched in description · 2026-11-08
CVE-2026-123494
Vikunja before 2.7.1 contains a cross-site request forgery vulnerability that allows attackers to import their data into a victim's account because the Todoist,
matched in description · 2026-11-08
CLOUD-CLEARWAYGROUP.COM
clop • US
matched in description · 2026-09-23