Lucene search
+L

260518 matches found

Microsoft CVE
Microsoft CVE
added 6 days ago9 views

Azure Confidential Ledger Remote Code Execution Vulnerability

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

9.1CVSS5.7AI score0.005EPSS
SaveExploits0
GithubExploit
GithubExploit
added 6 days ago20 views

Exploit for Improper Input Validation in Drupal

CVE-2018-7600 Drupalgeddon2 — Red Team Project ITSOLERA...

9.8CVSS7.7AI score0.99995EPSS
SaveExploits47
OSV
OSV
added 6 days ago6 views

MAL-2026-13398 Malicious code in @xiaohhhh1/canvas-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34add291ef7584aec7041449cb2e80d36ae98f93c2725e1aa018707e3334119 On bin start, @xiaohhhh1/canvas-agent opens an outbound WebSocket to the hardcoded relay wss://canvas.xiaohhhh1.com/api/agent-relay and treats inboun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 6 days ago8 views

MAL-2026-13397 Malicious code in @vanexalabs-ai/vanexa-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5de2359eef117d1f491dc2c8628e56d866435912bd6f8e55a10eee8e7a9a6c The package implements a daemon that pairs with a remote peer phone over WebRTC, using https://vanexa-agent-relay.workers.dev and...

6.4AI score
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added 6 days ago11 views

Malicious code in @vanexalabs-ai/vanexa-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5de2359eef117d1f491dc2c8628e56d866435912bd6f8e55a10eee8e7a9a6c The package implements a daemon that pairs with a remote peer phone over WebRTC, using https://vanexa-agent-relay.workers.dev and...

6.4AI score
SaveExploits0References12
RedhatCVE
RedhatCVE
added 6 days ago9 views

CVE-2026-67305

The FreeRDP Windows client contains a heap buffer overflow vulnerability. If a user pastes maliciously crafted, oversized clipboard data from an untrusted RDP server, it triggers memory corruption that may result in remote code execution...

9.4CVSS6.2AI score0.00489EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 6 days ago6 views

libXfont2: computeProps Property Buffer Heap Buffer Overflow

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server...

8.8CVSS6.1AI score0.00373EPSS
SaveExploits0References4
NVD
NVD
added 6 days ago7 views

CVE-2026-66909

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or,...

9.8CVSS0.00693EPSS
SaveExploits0References2
EUVD
EUVD
added 6 days ago11 views

EUVD-2026-53854

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or,...

9.8CVSS5.9AI score0.00693EPSS
SaveExploits0References1
OSV
OSV
added 6 days ago13 views

CVE-2026-66909 Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or,...

9.8CVSS5.8AI score
SaveExploits0References5
CVE
CVE
added 6 days ago60 views

CVE-2026-66909

Summary: CVE-2026-66909 affects Apache CXF's JMS transport, where inbound JMS ObjectMessage bodies are deserialized with no type restrictions, enabling potential denial of service or remote code execution if a gadget class is present on the classpath. The root cause is unrestricted native Java de...

9.8CVSS5.9AI score0.00693EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 6 days ago4 views

OPENSUSE-SU-2026:21540-1 Security update for samba

This update for samba fixes the following issues: Update to 4.22.11. Security issues fixed: - CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr bsc1261188. - CVE-2026-2340: WORM vfs module does not block directory...

9.8CVSS8.3AI score0.1393EPSS
SaveExploits9References27
Patchstack
Patchstack
added 6 days ago9 views

WordPress WPMU DEV Dashboard plugin <= 5.0.0 - Authentication Bypass to Arbitrary plugin Installation (Remote Code Execution) vulnerability

Authentication Bypass to Arbitrary plugin Installation Remote Code Execution vulnerability discovered by Austin Ginder in WordPress Plugin WPMU DEV Dashboard versions = 5.0.0...

8.1CVSS5.5AI score0.0051EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
added 6 days ago9 views

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency CISA. The vulnerability in question is CVE-2026-63077 CVSS score: 9.8, a case of deserialization...

9.8CVSS9.9AI score0.10722EPSS
SaveExploits4
Nuclei
Nuclei
added 6 days ago188 views

ServiceNow UI Macros - Template Injection

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted...

9.8CVSS8.1AI score0.99976EPSS
SaveExploits9References4
Nuclei
Nuclei
added 6 days ago28 views

Sitecore Experience Platform - Deserialization of Untrusted Data

Sitecore Experience Platform before 8.2 Update-7 and 9.0 before Update-2 is vulnerable to a remote code execution vulnerability CVE-2019-9874. An attacker can exploit this issue to execute arbitrary code on the affected system via a crafted request to the...

9.8CVSS9.2AI score0.83857EPSS
SaveExploits1References2
Nuclei
Nuclei
added 6 days ago62 views

Apache Solr DataImportHandler <8.2.0 - Remote Code Execution

Apache Solr is vulnerable to remote code execution vulnerabilities via the DataImportHandler, an optional but popular module to pull in data from databases and other sources. The module has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug...

9CVSS8AI score0.83547EPSS
SaveExploits3References5
Nuclei
Nuclei
added 6 days ago145 views

WordPress Workreap - Remote Code Execution

WordPress Workreap theme is susceptible to remote code execution. The AJAX actions workreapawardtempfileuploader and workreaptempfileuploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbitrary files to th...

9.8CVSS8.2AI score0.60113EPSS
SaveExploits9References5
Nuclei
Nuclei
added 6 days ago91 views

XStream <1.4.17 - Remote Code Execution

XStream before 1.4.17 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of...

8.8CVSS7.6AI score0.77735EPSS
SaveExploits1References5
Nuclei
Nuclei
added 6 days ago72 views

vRealize Operations Manager API - Server-Side Request Forgery

vRealize Operations Manager API is susceptible to server-side request forgery. A malicious actor with network access to the vRealize Operations Manager API can steal administrative credentials or trigger remote code execution using CVE-2021-21983. id: CVE-2021-21975 info: name: vRealize Operation...

8.5CVSS8AI score0.7829EPSS
SaveExploits12References3
Rows per page
Query Builder