Lucene search
+L

18 matches found

Kitploit
Kitploit
•added 2026/10/20 7:47 a.m.•16 views

CVE-2022-40126

This repository does not have a README...

7.8CVSS7.4AI score0.00319EPSS
SaveExploits1
osv_root
osv_root
•added 2026/10/17 3:26 a.m.•12 views

ROOT-OS-DEBIAN-13-CVE-2025-40126 CVE-2025-40126 in linux - Patched by Root

Root has patched CVE-2025-40126 in the linux package for Root:Debian:13. Multiple fixed versions available...

6.6AI score0.0023EPSS
SaveExploits0
osv_root
osv_root
•added 2026/10/13 2:02 p.m.•8 views

ROOT-OS-UBUNTU-2404-CVE-2025-40126 CVE-2025-40126 in linux - Patched by Root

Root has patched CVE-2025-40126 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

6.6AI score0.0023EPSS
SaveExploits0
Circl
Circl
•added 2026/08/17 12:15 p.m.•23 views

CVE-2026-40126

creationtimestamp| type| source ---|---|--- 2026-08-17 12:15:03+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-40126 2026-08-17 13:36:59+00:00| seen| https://bsky.app/profile/threadlinqs.bsky.social/post/3mtbt3uh33k2t 2026-08-18 11:39:38+00:00| seen|...

4.8CVSS5.8AI score0.00627EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/17 12:03 p.m.•117 views

CVE-2026-40126

OutSystems Service Center is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can exploit it by uploading a file whose filename contains malicious JavaScript code . The flaw exists in all locations within Service Center where a file can be attached and p...

4.8CVSS6AI score0.00627EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/17 12:03 p.m.•16 views

CVE-2026-40126 DOM-based Cross-Site Scripting in OutSystems Service Center

OutSystems Service Center is vulnerable to a DOM-based Cross-Site Scripting XSS attack that can be exploited by a low-privileged attacker via the upload of a file with a malicious filename containing JavaScript code. The vulnerability exists in all locations where a file can be attached and...

4.8CVSS6AI score0.00627EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/17 12:03 p.m.•46 views

CVE-2026-40126 DOM-based Cross-Site Scripting in OutSystems Service Center

OutSystems Service Center is vulnerable to a DOM-based Cross-Site Scripting XSS attack that can be exploited by a low-privileged attacker via the upload of a file with a malicious filename containing JavaScript code. The vulnerability exists in all locations where a file can be attached and...

4.8CVSS0.00627EPSS
SaveExploits0References3
Circl
Circl
•added 2026/04/02 5:00 p.m.•22 views

CVE-2025-40126

creationtimestamp| type| source ---|---|--- 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-10 18:00:00+00:00| seen|...

6.9AI score0.0023EPSS
SaveExploits0References3
osv_bell
osv_bell
•added 2025/11/14 6:05 a.m.•6 views

BELL-CVE-2025-40126

Bulletin has no description...

6.7AI score0.0023EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2025/11/12 11:15 a.m.•9 views

CVE-2025-40126

In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copyfromtouser for UltraSPARC The referenced commit introduced exception handlers on user-space memory references in copyfromuser and copytouser. These handlers return from the respectiv...

6.1AI score0.0023EPSS
SaveExploits0References39
Debian CVE
Debian CVE
•added 2025/11/12 10:23 a.m.•24 views

CVE-2025-40126

In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copyfromtouser for UltraSPARC The referenced commit introduced exception handlers on user-space memory references in copyfromuser and copytouser. These handlers return from the respectiv...

6.3AI score0.0023EPSS
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•9 views

MAL-2025-40126 Malicious code in yak-waterfall-qpn898-project (npm)

The package yak-waterfall-qpn898-project was found to contain malicious code...

7.2AI score
SaveExploits0
Circl
Circl
•added 2022/09/29 4:35 p.m.•21 views

CVE-2022-40126

creationtimestamp| type| source ---|---|--- 2022-09-29 16:35:04+00:00| seen| https://t.me/cibsecurity/50727 2026-07-29 12:01:00+00:00| seen| https://t.me/CVEhub/2917 2026-07-30 00:01:38+00:00| seen| https://t.me/CVEhub/2917 2026-08-01 02:00:04+00:00| published-proof-of-concept|...

7.8CVSS7.2AI score0.00319EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/09/29 11:48 a.m.•20 views

CVE-2022-40126

A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated...

8.1AI score0.00319EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/09/29 11:48 a.m.•54 views

CVE-2022-40126

A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute arbitrary commands when Service Mode is activated...

8.3AI score0.00319EPSS
SaveExploits1References1
CVE
CVE
•added 2022/09/29 11:48 a.m.•99 views

CVE-2022-40126

CVE-2022-40126 describes a misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 that allows privilege escalation and arbitrary command execution when Service Mode is activated. Public sources consistently identify the affected software as Clash for Windows and the v...

7.8CVSS8.1AI score0.00319EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/11/04 3:36 p.m.•90 views

CVE-2021-40126

Cisco Umbrella exposes an email-enumeration vulnerability in its web-based dashboard. An authenticated, remote attacker could attempt to modify a user’s email address and trigger an overly descriptive error message when the new address already exists, allowing enumeration of existing email addres...

4.3CVSS4.4AI score0.00873EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2019/11/06 12:00 a.m.•42 views

Google Chrome Denial of Service Vulnerability (CNVD-2019-40126)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the 'WebKit::WebPluginContainerImpl::handleEvent' function in Google Chrome. An attacker can exploit this vulnerability to cause a denial of service crash with the help of the htmlpluginelement.cpp...

6.5CVSS6.5AI score0.00654EPSS
SaveExploits1References1
Rows per page
Query Builder