Lucene search
+L

5153870 matches found

GithubExploit
GithubExploit
added 13 minutes ago1 views

Exploit for CVE-2026-60137

/ / / / / / | |/ / \ / /...

9.8CVSS6AI score0.08946EPSS
Exploits41
GithubExploit
GithubExploit
added 1 hour ago8 views

vibesec-static

vibesec-static — static vulnerability auditor for Python A si...

8.8CVSS6.8AI score0.01454EPSS
Exploits5
The Hacker News
The Hacker News
added 1 hour ago3 views

New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction

Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro's Zero Day Initiative ZDI detailed it on July 15. A fix shipped on June 25 in 7-Zip 26.02...

6.1AI score
Exploits0
GithubExploit
GithubExploit
added 1 hour ago8 views

Exploit for CVE-2026-61498

cve-id ⚡ Simple Usage Use this project only in safe and...

9.8CVSS5.4AI score0.02165EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2 hours ago3 views

CVE-2026-64116

A flaw was found in the Linux kernel's IPv6 In-situ Operations, Administration, and Maintenance IOAM module. This vulnerability allows a remote attacker to cause a system crash, leading to a Denial of Service DoS. The flaw occurs because the ipv6hopioam function does not properly validate a point...

5.5CVSS5.4AI score
Exploits0References4
GithubExploit
GithubExploit
added 2 hours ago10 views

Exploit for Improper Input Validation in Apache Camel

camel-langchain4j-tools Prompt-Injection → Header-Injection Re...

7.3CVSS6.3AI score0.00399EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2 hours ago2 views

CVE-2026-64127

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol component. A paired Bluetooth device could exploit this vulnerability by sending a specially crafted reconfiguration request. This would cause the kernel to inadvertently disclose a portion of its...

5.5CVSS5.3AI score
Exploits0References4
RedhatCVE
RedhatCVE
added 2 hours ago3 views

CVE-2026-64067

A flaw was found in the Linux kernel's netfs component. This vulnerability stems from missing memory barriers when the stream-subrequests list is accessed without locks. Specifically, functions that process read and write results, such as netfscollectreadresults and netfscollectwriteresults, acce...

5.5CVSS5.3AI score
Exploits0References4
F5 Networks
F5 Networks
added 2 hours ago3 views

K000162344: Spring framework vulnerability CVE-2026-41003

Security Advisory Description An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters. Affected versions: Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through...

7.6CVSS5.8AI score0.00204EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2 hours ago3 views

CVE-2026-64132

A flaw was found in the Linux kernel's IPv6 In-situ Operations, Administration, and Maintenance IOAM component. This vulnerability, a use-after-free, occurs when the kernel fails to correctly update a pointer after reallocating a network packet's buffer. This oversight could allow an attacker to...

7CVSS5.7AI score
Exploits0References4
RedhatCVE
RedhatCVE
added 2 hours ago4 views

CVE-2026-64048

A flaw was found in the Linux kernel's Server-Message-Block Direct SMC-D client. A remote attacker can exploit this vulnerability by sending a specially crafted SMC-Dv2 proposal with a Channel Identifier CHID of 0. This malicious proposal can cause a null pointer dereference in the kernel's SMC...

7CVSS5.5AI score
Exploits0References4
NVD
NVD
added 2 hours ago6 views

CVE-2026-2445

The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encoding before rendering it within the response. This condition allows for the injection of malicious JavaScript payloads. An attacker can leverage this vulnerability to cause the...

6.1CVSS
Exploits0References1
NVD
NVD
added 2 hours ago5 views

CVE-2026-16242

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert and without token-based agent authentication, so client certificates were not validated. A remote attacker who can reach the Konnectivity...

9.4CVSS
Exploits0References3
NVD
NVD
added 2 hours ago5 views

CVE-2026-13577

Dancer2 versions through 2.1.0 for Perl generate insecure session ids when CSPRNG modules are unavailable. Dancer2::Core::Role::SessionFactory::generateid silently falls back to a built-in rand-derived session id when both Math::Random::ISAAC::XS and Crypt::URandom are unavailable. The fallback...

Exploits0References2
Cvelist
Cvelist
added 2 hours ago8 views

CVE-2026-2445 Reflected Cross-Site Scripting via URL Parameter in Multiple WSO2 Products Enables UI Redirection and Modification

The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encoding before rendering it within the response. This condition allows for the injection of malicious JavaScript payloads. An attacker can leverage this vulnerability to cause the...

6.1CVSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2 hours ago3 views

CVE-2026-2445

The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encoding before rendering it within the response. This condition allows for the injection of malicious JavaScript payloads. An attacker can leverage this vulnerability to cause the...

6.1CVSS5.4AI score
Exploits0References2Affected Software3
CVE
CVE
added 2 hours ago7 views

CVE-2026-2445

CVE-2026-2445 involves a reflected cross-site scripting (XSS) flaw in multiple WSO2 products where user-supplied input in a URL parameter is rendered without proper sanitization/encoding. The underlying issue is unsafe handling of URL parameters that can inject malicious JavaScript, enabling brow...

6.1CVSS5.5AI score
Exploits0References1
EUVD
EUVD
added 2 hours ago4 views

EUVD-2026-45898

The affected product accepts user-supplied input within a URL parameter without enforcing expected sanitization or encoding before rendering it within the response. This condition allows for the injection of malicious JavaScript payloads. An attacker can leverage this vulnerability to cause the...

6.1CVSS5.4AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2 hours ago4 views

CVE-2026-64123

A flaw was found in the Linux kernel's High-availability Seamless Redundancy HSR networking component. When HSR node-list and node-status operations are performed, a generic-netlink reader might retain a pointer to a freed node table. This can lead to a use-after-free vulnerability, potentially...

5.5CVSS5.3AI score
Exploits0References4
Cvelist
Cvelist
added 3 hours ago5 views

CVE-2026-16242 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert and without token-based agent authentication, so client certificates were not validated. A remote attacker who can reach the Konnectivity...

9.4CVSS
Exploits0References3
Rows per page
Query Builder