Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-16504

VPS.org one-click Zulip template deployment instance contains multiple vulnerabilities

Deployment of the VPS.org one-click Zulip template deploys a hardcoded application signing key, a default database password ("zulip"), and DISABLE_HTTPS=True.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Vps.org
Products
Zulip Template
CVE-2026-16503

VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces (0.0.0.0:5432) with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Vps.org
Products
Supabase Template