CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

48036 matches found

Rapid7 Vulnerability Database (full)•added 2026/07/27 12:00 a.m.•7 views

CVE-2026-59239: Improper Neutralization of Input During Web Page Generation

Stored Cross-site Scripting CWE-79 in the email module in Roskus Prospero Flow CRM before 5.4.4 allows a remote, authenticated low-privileged user to execute arbitrary JavaScript in another user's browser, including administrators, leading to session compromise and account takeover, via a payload...

8.6CVSS6.5AI score0.00666EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/07/27 12:00 a.m.•10 views

CVE-2026-13152: Improper Privilege Management

The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities meta key on sites that use a non-default database table prefix, so an unauthenticated user who registers an account can be grant...

8.1CVSS5.7AI score0.00406EPSS

SaveExploits1References2

Kitploit•added 2026/07/26 5:04 p.m.•20 views

user-scanner v1.4.2

User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 380+ total scan vectors —including 155+ email-integrated sites and 225+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames a...

5.6AI score

SaveExploits0References14

GithubExploit•added 2026/07/26 4:39 p.m.•83 views

Exploit for Missing Authentication for Critical Function in Cpanel

cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...

9.8CVSS9.1AI score0.98527EPSS

SaveExploits79

KittySploit•added 2026/07/26 8:19 a.m.•3 views

WordPress Kirki CVE-2026-8206 detection

Detects Kirki Freeform Page Builder and flags versions 6.0.0–6.0.6 affected by CVE-2026-8206: CompLibFormHandler accepts an attacker-controlled email on POST /wp-json/KirkiComponentLibrary/v1/kirki-forgot-password, redirecting password-reset links. Fixed in 6.0.7+. !/usr/bin/env python3 -- coding...

9.8CVSS5.7AI score0.00772EPSS

SaveExploits10References5

KittySploit•added 2026/07/26 8:19 a.m.•2 views

WordPress Kirki CVE-2026-8206 password-reset takeover

CVE-2026-8206: Kirki 6.0.0–6.0.6 CompLibFormHandler accepts an arbitrary email when resetting by username. POSTs to /wp-json/KirkiComponentLibrary/v1/kirki-forgot-password with X-WP-Element-Nonce, redirecting the victim's reset link to attackeremail. Does not complete the password change requires...

9.8CVSS6AI score0.00772EPSS

SaveExploits10References5

Rapid7 Vulnerability Database (full)•added 2026/07/26 12:00 a.m.•10 views

CVE-2026-15962: Deserialization of Untrusted Data

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. The...

8.8CVSS5.7AI score0.00549EPSS

SaveExploits0References2

Veracode•added 2026/07/25 10:28 a.m.•38 views

Sensitive Information Disclosure

n8n is vulnerable to Sensitive Information Disclosure. The vulnerability is due to placing the full Google Service Account PEM private key in the JWT header's kid field instead of a key identifier, which allows an attacker to recover the private key from logged or intercepted JWTs and impersonate...

6.5CVSS6AI score0.00249EPSS

SaveExploits0References5Affected Software1

The Hacker News•added 2026/07/25 10:14 a.m.•40 views

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into entering usernames and passwords, attackers collected the credentials, and accounts were compromised later when an opportunity arose. That model is changing. Recent investigations...

6.1AI score

SaveExploits0

Github Security Blog•added 2026/07/24 9:56 p.m.•24 views

Poweradmin: OIDC `sub` collation bypass in Poweradmin leading to account takeover

Preface Poweradmin maps OIDC identities into local users through oidcuserlinks.oidcsubject plus providerid. In the MySQL schema, the OIDC link table explicitly uses utf8mb4unicodeci, which is case-insensitive and accent-insensitive. OIDC sub is a stable external subject identifier and should be...

5.9AI score

SaveExploits0References6Affected Software1

osv_ghsa•added 2026/07/24 9:56 p.m.•23 views

GHSA-CMWH-G2H8-C222 Poweradmin: OIDC `sub` collation bypass in Poweradmin leading to account takeover

8.1CVSS5.9AI score

SaveExploits0References6

vulnersOsv•added 2026/07/24 9:46 p.m.•3 views

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.13), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.13) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.13)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

9.6CVSS5.8AI score0.00413EPSS

SaveExploits0

vulnersOsv•added 2026/07/24 9:46 p.m.•3 views

org.openidentityplatform.openam:openam-slf4j (15.1.4), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.2) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.4 -...

9.6CVSS5.8AI score0.00413EPSS

SaveExploits0