Lucene search
+L

223444 matches found

Cvelist
Cvelist
added 17 hours ago11 views

CVE-2026-18721 kalcaddle kodbox SSO API Login apiLogin redirect

A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown processing of the file /user/sso/apiLogin of the component SSO API Login. The manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely. The exploit has be...

5.3CVSS
SaveExploits0References5
EUVD
EUVD
added 17 hours ago7 views

EUVD-2026-52570

A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown processing of the file /user/sso/apiLogin of the component SSO API Login. The manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely. The exploit has be...

5.3CVSS5.1AI score
SaveExploits0References5
CVE
CVE
added 18 hours ago7 views

CVE-2026-18720

The CVE concerns kalcaddle kodbox 1.67 Build 02, specifically the /index.php?plugin/msgWarning/action area of the msgWarning Plugin. The vulnerability allows remote, unauthenticated manipulation leading to improper authorization. Exploitation is reported as possible, with PoC exploit activity obs...

6.9CVSS5.6AI score
SaveExploits0References5
EUVD
EUVD
added 18 hours ago8 views

EUVD-2026-52565

A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of the file /index.php?plugin/msgWarning/action of the component msgWarning Plugin. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The explo...

6.9CVSS5.6AI score
SaveExploits0References5
EUVD
EUVD
added 19 hours ago6 views

EUVD-2026-52554

A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the file sar2html.py of the component Search. Performing a manipulation of the argument Search results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used...

6.5CVSS5.4AI score
SaveExploits0References4
CVE
CVE
added 19 hours ago15 views

CVE-2026-18719

CVE-2026-18719 affects cemtan sar2html 4.0.0, specifically an issue in the Search component’s sar2html.py that enables SQL injection via manipulation of the Search argument. The vulnerability may be exploitable remotely; public exploit activity is noted. The entry notes that the vendor was contac...

6.5CVSS6.5AI score
SaveExploits0References4
EUVD
EUVD
added 19 hours ago7 views

EUVD-2026-52537

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function setupgrade of the file /cgi-bin/glc of the component modem.so. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly...

10CVSS7.2AI score
SaveExploits0References6
EUVD
EUVD
added 19 hours ago7 views

EUVD-2026-52452

A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects unknown code of the file /api/upload of the component File Upload API. The manipulation of the argument File results in cross site scripting. The attack may be performed from remote. A high complexity level...

3.1CVSS3.4AI score
SaveExploits0References6
NVD
NVD
added 20 hours ago8 views

CVE-2026-18686

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.adduser of the file /cgi-bin/glc of the component nas-web RPC Wrapper. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit is now publi...

10CVSS
SaveExploits0References5
EUVD
EUVD
added 20 hours ago6 views

EUVD-2026-52547

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.adduser of the file /cgi-bin/glc of the component nas-web RPC Wrapper. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit is now publi...

10CVSS7.4AI score
SaveExploits0References5
Cvelist
Cvelist
added 20 hours ago7 views

CVE-2026-18686 GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function nas-web.adduser of the file /cgi-bin/glc of the component nas-web RPC Wrapper. Performing a manipulation results in command injection. The attack can be initiated remotely. The exploit is now publi...

10CVSS
SaveExploits0References5
NVD
NVD
added yesterday8 views

CVE-2026-18684

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the function removeprofile of the file /cgi-bin/glc of the component modem.so. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the...

10CVSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added yesterday6 views

CVE-2026-18685

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Impacted is the function setupgrade of the file /cgi-bin/glc of the component modem.so. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly...

10CVSS7.2AI score
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-66312

Buffer over-read in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...

6.5CVSS5.8AI score
SaveExploits0References2Affected Software1
NVD
NVD
added yesterday8 views

CVE-2026-18682

A security flaw has been discovered in OpenAkita up to 1.27.12. This vulnerability affects unknown code of the file /api/upload of the component File Upload API. The manipulation of the argument File results in cross site scripting. The attack may be performed from remote. A high complexity level...

3.1CVSS
SaveExploits0References5
NVD
NVD
added yesterday7 views

CVE-2026-18646

A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has...

6.9CVSS
SaveExploits0References5
NVD
NVD
added yesterday7 views

CVE-2026-18645

A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function addcontent of the file /system/admin/admin.php of the component Admin Content Endpoint. Performing a manipulation of the argument oldfile results in path traversal. The attack may be initiated remotely. Th...

5.5CVSS
SaveExploits0References5
EUVD
EUVD
added yesterday7 views

EUVD-2026-52442

A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the function FileDirectory.getDataColumn/FileDirectory.getFileFromUri of the component react-native-receive-sharing-intent. The manipulation of the argument displayname results in path traversal. The attack is...

5.3CVSS5.6AI score
SaveExploits0References5
EUVD
EUVD
added yesterday6 views

EUVD-2026-52431

A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executing a manipulation of the argument Name can lead to path traversal. The attack may be launched remotely. The exploit has...

6.9CVSS5.7AI score
SaveExploits0References5
CVE
CVE
added yesterday11 views

CVE-2026-18646

CVE-2026-18646 affects danpros HTMLy up to 3.1.1. The vulnerability is in the file /system/htmly.php of the Author Name Handler component. Exploitation arises from manipulating the Name argument, enabling path traversal and potentially remote execution. The attack vector is network-based, with a ...

6.9CVSS5.7AI score
SaveExploits0References5
Rows per page
Query Builder