Lucene search
+L

7601 matches found

Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•13 views

PT-2026-96810

Name of the Vulnerable Software and Affected Versions Lantronix SLC8000 versions prior to 9.7.0.5 Lantronix EMG8500 versions prior to 9.7.0.1 Lantronix EMG7500 versions prior to 9.7.0.1 Lantronix SLB882 affected versions not specified Lantronix SLCx-03 affected versions not specified Lantronix...

10CVSS6.6AI score0.01025EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•14 views

PT-2026-96803

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.2 SLC9000 versions prior to 9.7.0.2 EMG8500 versions prior to 9.7.0.1 EMG7500 versions prior to 9.7.0.1 SLB882 affected versions not specified SLCx-03 affected versions not specified SLCx-02 affected versions no...

9.9CVSS6.6AI score0.00463EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•20 views

CVE-2026-80145: Improper Neutralization of Special Elements used in an OS Command

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitrary shell commands as root ...

9.4CVSS6.6AI score0.01859EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•18 views

CVE-2026-80144: Improper Neutralization of Special Elements used in an OS Command

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented...

9.9CVSS6.6AI score0.01693EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•24 views

CVE-2026-80143: Improper Neutralization of Special Elements used in an OS Command

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented...

9.9CVSS6.6AI score0.01693EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•14 views

PT-2026-96811

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.5 SLC9000 versions prior to 9.7.0.2 EMG8500/EMG7500 versions prior to 9.7.0.1 SLB882 affected versions not specified SLCx-03 affected versions not specified SLCx-02 affected versions not specified Description A...

9.4CVSS6.4AI score0.00697EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•44 views

CVE-2026-80155: Improper Limitation of a Pathname to a Restricted Directory

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain an authentication bypass vulnerability in the web management portal upload endpoint that allows unauthenticated...

10CVSS6.5AI score0.01025EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•13 views

PT-2026-96809

Name of the Vulnerable Software and Affected Versions Lantronix SLC8000 affected versions not specified Lantronix SLC9000 affected versions not specified Lantronix EMG8500 affected versions not specified Lantronix EMG7500 affected versions not specified Lantronix SLB882 affected versions not...

9.6CVSS5.8AI score0.00627EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•10 views

PT-2026-96802

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.2 SLC9000 versions prior to 9.7.0.2 EMG8500 versions prior to 9.7.0.1 EMG7500 versions prior to 9.7.0.1 SLB882 affected versions not specified SLCx-03 affected versions not specified SLCx-02 affected versions no...

9.9CVSS6.6AI score0.00848EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•24 views

CVE-2026-80156: Improper Limitation of a Pathname to a Restricted Directory

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the web management portal upload endpoint that allows authenticated attackers to...

9.4CVSS6.5AI score0.00697EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/20 7:17 p.m.•26 views

CVE-2026-94044

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function createfile of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The...

7.5CVSS0.00615EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/20 6:15 p.m.•20 views

CVE-2026-94044 03-lovepreetSingh MCP route.ts create_file path traversal

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function createfile of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The...

7.5CVSS6.8AI score0.00615EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/20 6:15 p.m.•52 views

CVE-2026-94044

A path traversal vulnerability affects the create_file function in app/api/mcp/route.ts of the 03-lovepreetSingh MCP project (GitHub). By manipulating the filePath/content argument, a remote attacker with no privileges or user interaction can traverse the filesystem, resulting in low impact on co...

7.5CVSS6.8AI score0.00615EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/20 6:15 p.m.•22 views

EUVD-2026-83770

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function createfile of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The...

7.5CVSS6.9AI score0.00615EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/20 6:15 p.m.•64 views

CVE-2026-94044 03-lovepreetSingh MCP route.ts create_file path traversal

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function createfile of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The...

7.5CVSS0.00615EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/09/20 6:15 p.m.•10 views

CVE-2026-94044 03-lovepreetSingh MCP route.ts create_file path traversal

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function createfile of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The...

6.9CVSS6.8AI score0.00615EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/20 12:00 a.m.•12 views

CVE-2026-94044: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function createfile of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The...

7.5CVSS6.9AI score0.00615EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/20 12:00 a.m.•13 views

PT-2026-96001

Name of the Vulnerable Software and Affected Versions 03-lovepreetSingh MCP versions up to f95d035c5317fad81af9828286631053ccb23546 Description A remote path traversal issue exists in the create file function within the 'app/api/mcp/route.ts' file. This occurs when the filePath or content argumen...

7.5CVSS7AI score0.00615EPSS
SaveExploits0References12
Circl
Circl
•added 2026/09/15 4:15 p.m.•22 views

CVE-2026-82567

creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03 2026-09-15 20:04:10+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mvlgavpft22p...

6.3CVSS5.8AI score0.00339EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•17 views

Astra Linux – Vulnerability in Linux, Linux 5.10

Certain Arm Cortex and Neoverse processors, as of 2022-03-08, do not properly prevent cache speculation, also known as Spectre-BHB. Attackers can exploit the shared branch history in the Branch History Buffer BHB to influence mispredicted branches. As a result, cache allocation may allow attacker...

5.6CVSS6.7AI score0.00499EPSS
SaveExploits0References2
Rows per page
Query Builder