Lucene search
+L

28448 matches found

Cvelist
Cvelist
added 2026/09/12 1:50 a.m.40 views

CVE-2026-89267 starlette-admin 0.16.1 through 0.17.1 Searchable Fields Allowlist Bypass

starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchablefields allowlist when configured as an empty list, allowing authenticated users to filter on non-searchable fields. Attackers can submit structured filter queries via the list API's where parameter to perform equality an...

5.3CVSS0.00193EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-81009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as...

5.7AI score0.00166EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 11:45 p.m.12 views

CVE-2022-23305_POC

CVE-2022-23305 Log4j JDBCAppender POC de inyección SQL Esta es una aplicación muy sencilla basada en Spring Boot que demuestra la vulnerabilidad CVE-2022-23305. Utiliza Apache Maven, Spring Boot, Spring MVC y la base de datos en memoria H2 para registrar una entrada simple, tomada como un parámet...

9.8CVSS7.7AI score0.66537EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/11 10:28 p.m.11 views

CVE-2026-81009

A flaw was found in the Linux kernel. The iouring/query interface, specifically within the iohandlequeryentry function, does not properly cap the user-provided size when zeroing memory. A local attacker can exploit this by sending a specially crafted query that requests an excessively large amoun...

5.5CVSS5.6AI score0.00166EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 9:58 p.m.5 views

CVE-2025-50110

CVE-2025-50110 Transmisión de información sensible en texto claro en la aplicación Android EagleEyes Lite 1. Resumen Nombre : EagleEyesLite Versión : 2.0.0 Proveedor : AVTECH CWE : CWE-319: Transmisión de información sensible en texto claro, CWE-598: Uso del método de solicitud GET con cadenas de...

8.8CVSS6.1AI score0.00267EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/11 8:27 p.m.13 views

CorruptQueryAccessWorkaround

CorruptQueryAccessWorkaround:查询 '' 已损坏 针对 CVE-2019-1402 在 MS Access 中引入的「查询已损坏https://support.office.com/en-us/article/access-error-query-is-corrupt-fad205a5-9fd4-49f1-be83-f21636caedec」错误的最新解决方法。 还有其他一些解决方法需要在管理级别应用,例如卸载错误的更新。与此相比,这里提供的解决方法的意图是通过自动更改 MDB/ACCDB 内容本身来工作,且工作量尽可能小。 注意 微软确实在...

5.5CVSS5.9AI score0.02352EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 8:19 p.m.7 views

CVE-2026-81009

In the Linux kernel, the following vulnerability has been resolved: iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as usize. copystructtouser uses that usize and, when it is larger than the...

0.00166EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/11 8:19 p.m.3 views

UBUNTU-CVE-2026-81009

In the Linux kernel, the following vulnerability has been resolved: iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as usize. copystructtouser uses that usize and, when it is larger than the...

5.9AI score0.00166EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/11 7:43 p.m.12 views

CVE-2026-81009

CVE-2026-81009 affects the Linux kernel in the io_uring/query subsystem. The function io_handle_query_entry() clamps hdr.size for the inbound copy_from_user() but retains the original user-supplied value as usize. When passed to copy_struct_to_user(), an oversized usize triggers clear_user() on t...

5.8AI score0.00166EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/11 7:43 p.m.8 views

EUVD-2026-76332

In the Linux kernel, the following vulnerability has been resolved: iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as usize. copystructtouser uses that usize and, when it is larger than the...

5.8AI score0.00166EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/11 7:43 p.m.25 views

CVE-2026-81009 io_uring/query: cap user size passed to copy_struct_to_user

In the Linux kernel, the following vulnerability has been resolved: iouring/query: cap user size passed to copystructtouser iohandlequeryentry clamps hdr.size for the inbound copyfromuser but keeps the original user value as usize. copystructtouser uses that usize and, when it is larger than the...

0.00166EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/11 7:29 p.m.36 views

CVE-2026-49463

NL Portal Backend Libraries (Dutch government portal backend) contained a missing per-user authorization in two GraphQL resolver areas. The nl.nl-portal:documenten-api package (all versions up to 3.0.0) and nl.nl-portal:besluiten package (1.5.0–3.0.0) both declared resolvers without an authentica...

6.5CVSS5.7AI score0.00315EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/09/11 6:42 p.m.14 views

CVE-2026-88031

A flaw was found in go.mongodb.org/mongo-driver for version 1.17.10 and 2.9.1. Improper handling of data query elements in the GridFS component can lead to a file identifier being misinterpreted as a query. An authenticated user can exploit this to delete all GridFS file chunks, making stored fil...

8.1CVSS5.6AI score0.00261EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/11 9:47 a.m.14 views

cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577 - Inyección de Argumentos CGI en PHP en Windows "WorstFit" Resumen CVE-2024-4577 es una vulnerabilidad crítica de ejecución remota de código en la implementación CGI de PHP en Windows. Evita el parche para el CVE-2012-1823 original explotando la conversión de páginas de código...

9.8CVSS8AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/11 6:25 a.m.12 views

CVE-2026-11101-HTTP-Cache-Poisoning-via-Unkeyed-Query-Parameter

CVE-2026-11101 – Envenenamiento de caché HTTP mediante un parámetro de consulta no clave Descripción general Una caché web utiliza únicamente la ruta de la URL como clave de caché, ignorando los parámetros de consulta. Un atacante puede añadir una carga útil maliciosa a un parámetro no clave p...

6.5CVSS6.2AI score0.0025EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 4:56 a.m.10 views

dnsprobe

注意 - 该项目已停止维护。新的更新和修复将推送到 dnsx。 DNSProbe 是一个基于 retryabledns 构建的工具,允许你使用用户提供的解析器列表执行多个选择的 DNS 查询。 资源 资源 功能 用法 安装说明 从源码安装 在 Docker 容器中运行 查询主机的 A 记录 查询主机的 CNAME 记录 查询 Subfinder 输出的 CNAME 记录 许可证 功能 简单便捷的 DNS 记录查询工具。 用法 root@kitploit: dnsprobe -h 这将显示工具的帮助信息。以下是所有支持的选项。 安装说明 从源码安装 dnsprobe 需要 go1.13+...

5.8AI score
SaveExploits0References4
NVD
NVD
added 2026/09/11 4:18 a.m.8 views

CVE-2026-84960

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query String in all versions up to, and including, 3.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

6.1CVSS0.00223EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/11 4:17 a.m.9 views

CVE-2026-78172

The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query Parameter Name in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS0.00211EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/11 3:55 a.m.25 views

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

5.8AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/11 3:39 a.m.48 views

CVE-2026-78172 Themify – WooCommerce Product Filter <= 1.5.5 - Reflected Cross-Site Scripting

The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query Parameter Name in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS0.00211EPSS
SaveExploits0References5
Rows per page
Query Builder