Lucene search
+L

119149 matches found

Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-93116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: asus-wmi: fix resource leaks on probe failure During driver initialization in asuswmiadd, various subsystems are registered sequentially. However,...

7CVSS0.00115EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-90422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: mediatek: pllfh: Fix IO remapping leak in registerpllfhs error path When mtkclkregisterpllfhs function fails to register a PLL, it unregisters all PLLs and...

0.00198EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/09/18 12:00 a.m.5 views

The vulnerability of the R7WebsSecurityHandler() function in the Tenda i6 Wi-Fi router software allows a hacker to bypass the catalog.

The vulnerability of function R7WebsSecurityHandler in the Tenda i6 Wi-Fi router software is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to bypass the directory structure...

7.5CVSS0.00691EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2026/09/18 12:00 a.m.6 views

The vulnerability of the `extractTarDirectory` and `ensureLinkPath` functions in the `content/file.Store` component of the oras-go programming language library allows a malicious actor to gain unauthorized access to create and re-write files.

The vulnerability of the extractTarDirectory and ensureLinkPath functions in the content/file.Store component of the oras-go library is related to an incorrect restriction on the path to the directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to create and...

10CVSS0.00667EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-90086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: honor XDPTXMETADATA in zero-copy path The zero-copy path reads TX metadata whenever the UMEM has metadata space, even if the descriptor does not set...

0.00198EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2026/09/18 12:00 a.m.5 views

WP < 7.1.1 - Author+ Path Traversal via Templates REST API

Description WordPress does not properly validate template identifiers passed to a REST API endpoint in some cases, which could allow users with a role as low as author to read HTML files outside of the themes directory via path traversal...

SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.5 views

EulerOS Virtualization 2.11.1 : rsync (EulerOS-SA-2026-3470)

According to the versions of the rsync packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link...

8.1CVSS0.08823EPSS
SaveExploits4References11
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-93155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: keembay - Fix AEAD unregister count in error path registeraesalgs registers the AEAD algorithms before registering the skcipher algorithms. If skcipher...

0.002EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.4 views

EulerOS 2.0 SP10 : python-pip (EulerOS-SA-2026-3763)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...

8CVSS0.0032EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/09/18 12:00 a.m.6 views

The vulnerability of the Adobe Photoshop graphic editor lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

8.6CVSS0.00211EPSS
SaveExploits0References2Affected Software2
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.4 views

EulerOS Virtualization 2.11.0 : rsync (EulerOS-SA-2026-3557)

According to the versions of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link destinati...

8.1CVSS0.08823EPSS
SaveExploits4References11
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-93167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - csky: Fix a4/a5 restoration in syscall trace path The syscall trace path reloads syscall arguments from ptregs before calling the syscall handler. On C-SKY ABIv...

0.00211EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-92510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Fix potential use after free in ibdestroysrquser When accessing a SRQ via the netlink path the only synchronization mechanism for the said SRQ is...

7.8CVSS0.00126EPSS
SaveExploits0References3
VulnCheck KEV
VulnCheck KEV
added 2026/09/18 12:00 a.m.7 views

VulnCheck KEV: CVE-2025-39682

Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rxlist to bypass the intended recvmsg record-type handling, potentially causing subsequent TLS records to be processed using...

9.8CVSS0.012EPSS
SaveIn wildExploits2References2
Kitploit
Kitploit
added 2026/09/17 11:55 p.m.11 views

CVE-2025-6082

CVE-2025-6082 PoC de Divulgación de Ruta Completa Autor : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-6082 Vulnerabilidad : Divulgación de Ruta Completa CWE-200 Descripción Este PoC explota un fallo de Divulgación de Ruta Completa en el plugin de WordPress Birth Chart Compatibility version...

5.3CVSS6.2AI score0.0154EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 11:55 p.m.8 views

CVE-2025-5964-

CVE‑2025‑5964 Path Traversal PoC para M‑Files Autor: Byte Reaper Telegram: @ByteReaper0 Resumen Este repositorio contiene una Prueba de Concepto PoC en C para una supuesta vulnerabilidad de Path Traversal en M‑Files versión 25.6.14925.0. La PoC archivo exploit.c intenta leer archivos sensibles po...

8.4CVSS7.4AI score0.12725EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 11:53 p.m.16 views

CVE-2025-59342

CVE-2025-59342 - Path Traversal esm-dev Autor: Byte Reaper Descripción CVE-2025-59342 es una vulnerabilidad de path traversal en esm.sh, una red de entrega de contenido CDN nobuild para el desarrollo web moderno, en la versión 136 y anteriores. El problema existe en el manejo de la cabecera HTTP...

6.9CVSS8.3AI score0.03031EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 11:40 p.m.10 views

CVE-2024-25081_2025-47273

CVE-2024-25081 y CVE-2025-47273 Prueba de concepto FontForge versión ≤ 20230101 y librería Setuptools versión Prueba de concepto para elevar los privilegios al usuario que ejecuta una tarea que utiliza Font Forge. El segundo CVE eleva los privilegios a root, siempre que tengas permisos de escritu...

8.8CVSS6.9AI score0.01539EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/17 11:39 p.m.7 views

CVE-2025-44137

CVE-2025-44137 Unauthenticated File Read in MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creati...

8.2CVSS8.4AI score0.0136EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/17 11:39 p.m.9 views

attackmapper

AttackMapper Plataforma de Visualización de Rutas de Ataque e Inteligencia de Amenazas Características • Instalación • Uso • Intel de Amenazas • Contribuir Resumen AttackMapper es una herramienta CLI para operaciones de equipo rojo que genera rutas de ataque, mapea técnicas al marco MITRE ATT&CK ...

6AI score
SaveExploits0
Rows per page
Query Builder