Lucene search
+L

290390 matches found

CVE
CVE
•added 2026/09/15 10:10 p.m.•70 views

CVE-2026-92248

CVE-2026-92248 is a heap-based buffer overflow in the file-psd plugin of GIMP . When GIMP generates a thumbnail preview for a specially crafted PSD file, an integer overflow occurs during multiplication of values from an embedded JPEG header, causing an undersized heap allocation. The subsequent ...

7.8CVSS8AI score0.00187EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/15 8:56 p.m.•55 views

CVE-2026-91939

Cotonti 1.0.0 Comments plugin passes the ci GET parameter directly to unserialize() without an allowed_classes restriction. This allows unauthenticated attackers to inject arbitrary PHP objects via crafted serialized payloads, triggering gadget chains that can lead to database manipulation or rem...

9.8CVSS6.3AI score0.00978EPSS
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/15 8:44 p.m.•31 views

nuclei-burp-plugin v1.1.4

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation. Features Template matcher generation Word and Binary matcher creation using selected response snippets from Proxy history or Repeater contexts Multi-line selections are split to separate...

6.2AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/09/15 8:05 p.m.•15 views

EUVD-2026-79746

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to bypass administrator-configured authentication by supplying a specific GET parameter without any capability check or...

6.9CVSS5.8AI score0.00382EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/15 8:05 p.m.•34 views

CVE-2026-89027

miniOrange JWT Authentication for WP REST APIs plugin for WordPress (before 4.8.0 ) contains an authentication method downgrade vulnerability. An unauthenticated attacker can supply a specific GET parameter that bypasses capability checks and nonce verification, forcing the plugin to use Basic HT...

6.9CVSS5.9AI score0.00382EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/15 8:05 p.m.•50 views

CVE-2026-89027 miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to bypass administrator-configured authentication by supplying a specific GET parameter without any capability check or...

6.9CVSS0.00382EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•9 views

Malicious Package

Overview strapi-plugin-yesccresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•12 views

Malicious Package

Overview strapi-plugin-revsh-meeb322k is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•8 views

Malicious Package

Overview strapi-plugin-yayccresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•13 views

Malicious Package

Overview strapi-plugin-uicc-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•10 views

Malicious Package

Overview strapi-plugin-rs-meeb322k is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•9 views

Malicious Package

Overview strapi-plugin-revs01-meeb322k is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•9 views

Malicious Package

Overview strapi-plugin-weccresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•11 views

Malicious Package

Overview strapi-plugin-revs02-meeb322k is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•12 views

Malicious Package

Overview strapi-plugin-revs-meeb322k is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•13 views

Malicious Package

Overview strapi-plugin-os-info-meeb322k is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•14 views

Malicious Package

Overview strapi-plugin-tryccresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•11 views

Malicious Package

Overview strapi-plugin-proccresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•11 views

Malicious Package

Overview strapi-plugin-plsresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/15 6:32 p.m.•13 views

Malicious Package

Overview strapi-plugin-ccresh-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder