Lucene search
+L

60023 matches found

CVE
CVE
added 2026/09/10 5:54 p.m.4 views

CVE-2026-88028

Improper neutralization of special elements in data query logic in the polymorphic relation handling of the MongoDB integration for Laravel can cause a caller-supplied relation identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can...

7.1CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 5:52 p.m.3 views

CVE-2026-88027 Mass deletion and overwrite of embedded documents via query-operator injection in embedded record keys in MongoDB integration for Laravel

Improper neutralization of special elements in data query logic in the embedded-document relation handling of the MongoDB integration for Laravel can cause a caller-supplied embedded record identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated use...

7.1CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 5:46 p.m.3 views

CVE-2026-88025 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# Driver

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier...

8.3CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 5:46 p.m.3 views

CVE-2026-88025

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier...

8.3CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 5:41 p.m.4 views

CVE-2026-88023 GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB PHP Library

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Library can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

8.3CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 5:37 p.m.5 views

CVE-2026-88022

Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an array supplied to an explicit equality filter to be interpreted as a query condition rather than as a literal value. This affects the three-argument where method when the operator i...

8.4CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 5:37 p.m.3 views

CVE-2026-88022 Unauthorized document disclosure and deletion via query-operator injection in explicit equality filters in MongoDB integration for Laravel

Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an array supplied to an explicit equality filter to be interpreted as a query condition rather than as a literal value. This affects the three-argument where method when the operator i...

8.4CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 1:12 p.m.17 views

starboard

Starboard is joining Trivy. We've announced our plans to discontinue Starboard and merge it into Trivy. Starboard CLI has been reintroduced as trivy kubernetes command and starboard-operator with a focus on trivy capabilities is available as Trivy-Operator. We will not be accepting new...

6AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/10 1:04 p.m.12 views

nebula

Nebula AI Powered Pentesting The Zero Layer workbench Acknowledgement First, I would like to thank Almighty God, who is the source of all knowledge. Without Him, this would not be possible. Nebula brings the working parts of a security engagement into one desktop surface: terminal, code, browser,...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:48 p.m.6 views

CVE-2025-51397

Exploit Title: LiveHelperChat =4.61 - Stored Cross Site Scripting XSS via Operator Surname Date: 09/06/2025 Exploit Author: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Vendor Homepage: https://github.com/LiveHelperChat/livehelperchat/ Software Link:...

5.4CVSS5.9AI score0.00917EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/10 9:30 a.m.7 views

renovate-operator

Renovate: The Kubernetes-Native Way Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups...

5.8AI score
SaveExploits0References2
NVD
NVD
added 2026/09/10 8:16 a.m.5 views

CVE-2026-80351

Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...

SaveExploits0References1
CVE
CVE
added 2026/09/10 7:43 a.m.14 views

CVE-2026-80354

An authorization bypass vulnerability in Apache Camel K affects the Builder trait mavenProfiles ValueSources during custom resource resolution. A tenant can reference secrets by name in the operator namespace , potentially exposing secrets belonging to other tenants or operator components. The is...

8.1CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/10 7:43 a.m.8 views

EUVD-2026-75292

Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant to reference secrets by name in the operator namespace, potentially exposing secrets belonging to other tenants or operator components. Th...

8.1CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 7:42 a.m.12 views

CVE-2026-80351 Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod

Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...

SaveExploits0References1
EUVD
EUVD
added 2026/09/10 7:42 a.m.8 views

EUVD-2026-75291

Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...

9.8CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 7:42 a.m.10 views

CVE-2026-80351

Apache Camel K is affected by an eval injection vulnerability (CVE-2026-80351) in its dynamically evaluated Maven configuration . Tenant-controlled repository content can influence code execution within the operator pod , potentially allowing tenants to execute arbitrary code with operator privil...

9.8CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/10 7:41 a.m.12 views

CVE-2026-80352 Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...

SaveExploits0References1
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.306 views

MinIO Operator Console Authentication Bypass

MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. id: CVE-2021-41266 info: name: MinIO Operator...

9.8CVSS7.9AI score0.48414EPSS
SaveExploits1References5
OSV
OSV
added 2026/09/10 12:52 a.m.3 views

CLEANSTART-2026-DB46993 Prometheus is an open-source monitoring system and time series database

Multiple security vulnerabilities affect the prometheus-operator package. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

9.8CVSS5.8AI score0.00692EPSS
SaveExploits0References31
Rows per page
Query Builder