Lucene search
+L

93003 matches found

Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.7 views

PT-2026-71831

A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManager ParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument...

6.3CVSS4.5AI score0.00308EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71726

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote attackers can bypass security restrictions because the system does not properly validate client-asserted identity. Recommendations At the moment, there is no information about a newer version...

8.1CVSS5.2AI score0.00347EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71748

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

5.3CVSS4.8AI score0.00345EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.7 views

PT-2026-71893

A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0. Affected is the function explore url of the file src/mcp-rdf-explorer/server.py of the component MCP Server. Performing a manipulation of the argument url results in server-side request forgery. The attack may be...

7.5CVSS7.1AI score0.00278EPSS
SaveExploits0References6
Redos
Redos
added 2026/08/13 12:00 a.m.8 views

ROS-20260813-73-0003

The vulnerability in podman is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS8.8AI score0.00607EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.6 views

PT-2026-71629

Name of the Vulnerable Software and Affected Versions rsync daemon versions prior to 3.5.0 Description An IP address spoofing issue exists that allows unauthenticated remote attackers to bypass IP-based access controls. By sending a crafted PROXY protocol header containing a forged source address...

9.1CVSS5.2AI score0.00501EPSS
SaveExploits0References101
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71652

Name of the Vulnerable Software and Affected Versions rsync versions 3.1.0 through 3.4.x Description An access control bypass exists that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during hostname-based access control evaluation. When a DNS lookup f...

9.2CVSS5.2AI score0.00525EPSS
SaveExploits0References103
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.7 views

PT-2026-71655

Name of the Vulnerable Software and Affected Versions rsync versions 3.4.2 through 3.4.x Description A denial of service issue exists where a remote sender can exhaust system resources on the receiver. This occurs because the short alias --zt for the --compress-threads option bypasses the string...

9.1CVSS5.3AI score0.00566EPSS
SaveExploits0References103
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.11 views

PT-2026-71815

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...

8.1CVSS5.3AI score0.00353EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.7 views

PT-2026-71741

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource allocation...

7.5CVSS5.3AI score0.00386EPSS
SaveExploits0References2
Redos
Redos
added 2026/08/13 12:00 a.m.7 views

ROS-20260813-73-0050

The vulnerability of the verifyHostName configuration parameter in the Apache Log4j Core logging library is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack remotely...

6.3CVSS6.6AI score0.0041EPSS
SaveExploits0
Redos
Redos
added 2026/08/13 12:00 a.m.9 views

ROS-20260813-73-0002

The vulnerability in Portainer-Ce is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

9.4CVSS8.3AI score0.00163EPSS
SaveExploits0
Redos
Redos
added 2026/08/13 12:00 a.m.7 views

ROS-20260813-73-0052

The vulnerability in uriparser is related to numerical truncation errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0
Redos
Redos
added 2026/08/13 12:00 a.m.6 views

ROS-20260813-73-0051

The vulnerability in Wireshark is related to overflowing of buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.5CVSS5.8AI score0.00092EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.6 views

PT-2026-71813

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

5.3CVSS5.3AI score0.00357EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.10 views

PT-2026-71743

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A buffer overflow allows a remote authenticated attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hol...

8.8CVSS6.2AI score0.00436EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.7 views

PT-2026-71834

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...

2.7CVSS5.3AI score0.00325EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71746

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server DoS for that server...

7.5CVSS5.8AI score0.00392EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-53789

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intende...

8.1CVSS6.6AI score0.00357EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.9 views

PT-2026-71855

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking...

5.3CVSS5.3AI score0.00289EPSS
SaveExploits0References2
Rows per page
Query Builder