5315535 matches found
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
Threat actors are exploiting two critical security flaws in WordPress plugins Super Forms and Elementor Pro, according to findings from Wordfence. The vulnerabilities in question are - CVE-2026-14894 CVSS score: 9.8 - A missing file type validation vulnerability in Super Forms – Drag & Drop Form...
CVE-2026-27432 WordPress WP Rentals theme < 3.16.0 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in sc Internet Vivoo WP Rentals allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Rentals: from n/a before 3.16.0...
CVE-2026-85528 Snowflake JDBC Driver auto-configuration account validation permits credential redirection
Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to...
CVE-2026-85528 Snowflake JDBC Driver auto-configuration account validation permits credential redirection
Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to...
ClearSword
ClearSword Resumen Un port en C del exploit de Kernel DarkSword Intenté mantenerlo lo más fiel posible al original, pero tuve que hacer algunos cambios para que funcionara en versiones anteriores de iOS. Estos cambios y modificaciones personales se indicarán con comentarios NOTE. He añadido...
CVE-2026-71196
A server-side request forgery SSRF vulnerability was found in OpenStack Glance. The web-download image import method allows authenticated users to provide a URI from which the Glance service fetches data. Due to insufficient default host filtering, an attacker with standard tenant credentials can...
CVE-2026-60004-POC
CVE-2026-60004 — Ejecución Remota de Código Pre-Auth en Gitea CVSS 9.8 root@kitploit: ┌──────────────────────────────────────────────────────────────┐ │ CVE-2026-60004 │ Gitea Pre-Auth RCE │ CVSS 9.8 CRIT │ │ diffpatch → git hook injection │ v1.17–1.27.0 affected │...
CVE-2020-9802
Este repositorio no tiene un README...
CVE-2026-17033 vulnerabilities
Vulnerabilities for packages: grafana...
CVE-2026-65819 vulnerabilities
Vulnerabilities for packages: cilium...
CVE-2026-79140 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-79189 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-79197 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-79181 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-79220 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-79272 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-79143 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-79249 vulnerabilities
Vulnerabilities for packages: chromium...