Lucene search
+L

169765 matches found

EUVD
EUVD
added 2026/08/05 5:18 a.m.13 views

EUVD-2026-53051

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

5.4AI score0.00426EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/05 5:18 a.m.12 views

CVE-2026-66257

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

5.4AI score0.00426EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/05 5:18 a.m.22 views

CVE-2026-66257 Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

7.5CVSS5.2AI score
SaveExploits0References5
OSV
OSV
added 2026/08/05 1:00 a.m.9 views

MAL-2026-12032 Malicious code in add-two-numbers-x7q9m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550dfc48a74577d95e53fc64cc296a9cc59a5940edb6eac3f191f41376350635 The package advertises itself as a trivial 'add two numbers' utility but its preinstall lifecycle script enumerates the installer's Desktop directory...

5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/05 12:30 a.m.22 views

EUVD-2026-52976

A vulnerability was identified in Baserow up to 2.3.2. Affected by this vulnerability is the function verify of the file backend/src/baserow/api/twofactorauth/views.py of the component 2FA Verify Endpoint. Such manipulation leads to improper authentication. The attack may be launched remotely. Th...

5CVSS5.1AI score0.00339EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/08/05 12:00 a.m.9 views

CVE-2025-70962

Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can use the unchangeable default credentials to access the RTSP video stream, resulting in unauthorized...

5.5AI score0.00382EPSS
SaveExploits1References3
CVE
CVE
added 2026/08/05 12:00 a.m.57 views

CVE-2025-63823

The CVE-2025-63823 entry affects My Safetipin Android Application version 5.2.1, where hardcoded credentials in the authentication module enable remote attackers to bypass authentication and gain unauthorized access to user accounts through predictable OTP values. The root cause is the hardcoded ...

9.8CVSS5.6AI score0.00437EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/05 12:00 a.m.30 views

CVE-2025-63823

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypass authentication and gain unauthorized access to user accounts via predictable OTP values...

0.00437EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-67590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid...

7.5CVSS5.3AI score0.00493EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/05 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-67589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects...

7.5CVSS5.3AI score0.00493EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/05 12:00 a.m.24 views

CVE-2025-70962

CVE-2025-70962 affects Zosi C519M, version V4.2.8.823C01450BA. The issue is Incorrect Access Control due to hardcoded credentials in the RTSP authentication, allowing network-remote access to the RTSP video stream and unauthorized camera viewing. A PoC/exploit is available (GitHub: https://github...

7.5CVSS5.5AI score0.00382EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/08/04 9:56 p.m.19 views

EUVD-2026-39022

Ghost: Member existence leak via magic link sign-in response...

5.3CVSS5.4AI score0.00206EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/04 9:45 p.m.54 views

CVE-2026-18816

Summary : CVE-2026-18816 affects Baserow up to 2.3.2. The vulnerability resides in the 2FA Verify Endpoint, specifically the verify function in backend/src/baserow/api/two_factor_auth/views.py, enabling improper authentication. Impact : Could be exploited remotely; the exploit complexity is descr...

5CVSS5.1AI score0.00339EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/04 9:45 p.m.46 views

CVE-2026-18816 Baserow 2FA Verify Endpoint views.py verify improper authentication

A vulnerability was identified in Baserow up to 2.3.2. Affected by this vulnerability is the function verify of the file backend/src/baserow/api/twofactorauth/views.py of the component 2FA Verify Endpoint. Such manipulation leads to improper authentication. The attack may be launched remotely. Th...

5CVSS0.00339EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2026/08/04 9:28 p.m.13 views

Ghost: Blind Password Hash Disclosure in Ghost Admin API

Impact Any staff-level user was able to leak the hashed passwords of other staff users. An offline password-guessing attack against the hashes could lead to account takeover if successful, but Device Verification should have prevented an attacker from logging in with a recovered password. Dependi...

4.8CVSS5.6AI score0.00195EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2026/08/04 9:16 p.m.10 views

CVE-2026-66902

Google::Auth versions before 0.06 for Perl run a command named in an externalaccount credentials JSON via an ungated system call. The Pluggable subclass reads credentialsource.executable.command from the credentials JSON and runs it as system$command, a single argument call that passes the whole...

9.8CVSS0.00441EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/04 8:49 p.m.11 views

CVE-2026-66902 Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call

Google::Auth versions before 0.06 for Perl run a command named in an externalaccount credentials JSON via an ungated system call. The Pluggable subclass reads credentialsource.executable.command from the credentials JSON and runs it as system$command, a single argument call that passes the whole...

9.8CVSS5.4AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/04 8:49 p.m.38 views

CVE-2026-66902 Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call

Google::Auth versions before 0.06 for Perl run a command named in an externalaccount credentials JSON via an ungated system call. The Pluggable subclass reads credentialsource.executable.command from the credentials JSON and runs it as system$command, a single argument call that passes the whole...

0.00441EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/04 8:49 p.m.70 views

CVE-2026-66902

CVE-2026-66902 : Google::Auth for Perl versions before 0.06 allows an ungated system call when using an external_account credentials JSON. The Pluggable subclass reads credential_source.executable.command and executes it via system($command), which passes the entire string to /bin/sh -c. The cred...

9.8CVSS5.4AI score0.00441EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/04 8:49 p.m.12 views

CVE-2026-66901 Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated URLs taken from the credentials JSON

Google::Auth versions before 0.09 for Perl allow server side request forgery and credential exfiltration via unvalidated URLs taken from the credentials JSON. The URLs the library requests are read from the credentials JSON, and their hosts were not checked against the universe domain before the...

7.5CVSS5.5AI score
SaveExploits0References10
Rows per page
Query Builder