NVD

Everything Packet Tribune has reported about NVD: 3 stories, newest first. Part of our Vulnerabilities coverage.

Dockhand Critical Flaw Lets Attackers Reset Passwords via API Without Auth in Pre-1.0.45 Versions

A critical flaw in Dockhand versions prior to 1.0.45 permits unauthenticated attackers to reset user passwords via manipulated API requests, enabling full account compromise.

Oct 15, 2026

Vulnerabilities

Grav Login OAuth flaw exposes predictable credentials for unauthenticated access

Before version 1.4.3, the plugin sets unsalted MD5 passwords and deterministic usernames, enabling credential guessing attacks.

Oct 12, 2026

Vulnerabilities

OpenSpug Remote Command Injection: Unpatched Critical CVE-2026-108540 Affects Versions 3.0-4.0.1 With No Vendor Fix

Attackers can execute arbitrary OS commands via OpenSpug’s file transfer endpoint, with no patch confirmed by the vendor for affected releases.

Oct 11, 2026