Lucene search
+L

10413 matches found

Nuclei
Nuclei
added 5 hours ago20 views

Tandoor Recipes < 1.5.24 - Jinja2 SSTI RCE

Tandoor Recipes 1.5.24 has a Jinja2 SSTI vulnerability that allows command execution via recipe steps. id: CVE-2025-23211 info: name: Tandoor Recipes 1.5.24 - Jinja2 SSTI RCE author: sammiee5311 severity: critical description: | Tandoor Recipes 1.5.24 has a Jinja2 SSTI vulnerability that allows...

9.9CVSS6AI score0.03464EPSS
SaveExploits1References4
Nuclei
Nuclei
added 5 hours ago79 views

User Profile Picture < 2.5.0 - Sensitive Information Disclosure

The REST API endpoint getusers in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the uploadfiles capability. This included password hashes, hashed user activation keys, usernames, emails, and other less...

7.5CVSS7.1AI score0.04788EPSS
SaveExploits2References3
Nuclei
Nuclei
added 5 hours ago21 views

Images to WebP < 1.9 - Authenticated Local File Inclusion

The Images to WebP WordPress plugin before version 1.9 did not validate or sanitize the tab parameter before using it in the include function. id: CVE-2021-24644 info: name: Images to WebP 1.9 - Authenticated Local File Inclusion author: Sourabh-Sahu severity: high description: | The Images to We...

7.5CVSS7AI score0.05028EPSS
SaveExploits2References2
Nuclei
Nuclei
added 5 hours ago26 views

Responsive Pricing Table <= 5.1.12 - Cross-Site Scripting

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'planicons' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-lev...

6.4CVSS6AI score0.00598EPSS
SaveExploits0References3
Nuclei
Nuclei
added 5 hours ago16 views

Tutor LMS <= 2.1.10 - SQL Injection

Tutor LMS – eLearning and online course solution plugin for WordPress all versions up to 2.6.1 contains a time-based SQL Injection caused by insufficient escaping on the questionid parameter in SQL queries, letting authenticated attackers with subscriber or higher access extract sensitive...

8.8CVSS7.4AI score0.03109EPSS
SaveExploits0References3
Nuclei
Nuclei
added 5 hours ago17 views

WP Projects Portfolio <= 3.0 - Cross-Site Scripting

WP Projects Portfolio with Client Testimonials WordPress plugin = 3.0 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13114...

6.1CVSS7.2AI score0.00562EPSS
SaveExploits1References2
Nuclei
Nuclei
added 5 hours ago71 views

NocoBase - SQL Injection

NocoBase @nocobase/plugin-collection-sql versions prior to 2.0.39 are vulnerable to SQL injection via the sqlCollection:update endpoint. The checkSQL function, which blocks dangerous SQL keywords and ensures only SELECT statements are allowed, is not called during collection updates. id:...

7.2CVSS5.9AI score0.01833EPSS
SaveExploits1References2
Nuclei
Nuclei
added 5 hours ago20 views

AstrBot <= 4.22.1 - Command Injection

AstrBot versions up to and including 4.22.1 contain a command injection vulnerability in the MCP server configuration endpoint. The /api/tools/mcp/add endpoint accepts arbitrary command and args fields that are passed directly to subprocess execution during the connection test, without any...

6.5CVSS6.9AI score0.02304EPSS
SaveExploits0References2
Nuclei
Nuclei
added 5 hours ago49 views

Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path Traversal

Frappe is a full-stack web application framework. Versions prior to 15.105.0 and 16.15.0 contain a possible Arbitrary File Read vulnerability via Path Traversal. The issue is resolved in versions 16.15.0, 15.105.0 and above. id: CVE-2026-39352 info: name: Frappe Framework 16.15.0 - Arbitrary File...

8.7CVSS5.8AI score0.01279EPSS
SaveExploits0References4
Nuclei
Nuclei
added 5 hours ago3 views

Dolibarr <=22.0.4 - Local File Inclusion

Dolibarr = 22.0.4 contains a local file inclusion caused by manipulation of the objectdesc parameter and a fail-open logic flaw in restrictedArea in /core/ajax/selectobject.php, letting authenticated users with no specific privileges read arbitrary non-PHP files. id: CVE-2026-34036 info: name:...

6.5CVSS5.8AI score0.00419EPSS
SaveExploits3References3
Nuclei
Nuclei
added 5 hours ago3 views

Meta Box <= 5.11.1 - Arbitrary File Deletion

The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaxdeletefile function. This makes it possible for authenticated attackers with Contributor-level access and above to delete arbitrary files on the server. id: CVE-2026-3946...

7.2CVSS5.9AI score0.00654EPSS
SaveExploits0References2
EUVD
EUVD
added 8 hours ago6 views

EUVD-2026-50963

A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not sufficiently validated before being used for file access. An authenticated attacker can exploit this issue to access or manipulate files outside...

6.9CVSS5.8AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added yesterday5 views

CVE-2026-7436 WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Attribute

The WPC Badge Management for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the wpcbmbestseller shortcode in all versions up to, and including, 3.1.6 due to insufficient input sanitization and output escaping on user supplied attributes...

6.4CVSS6AI score
SaveExploits0References5
NVD
NVD
added yesterday7 views

CVE-2026-63232

A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment reinforcement endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...

9.9CVSS0.00296EPSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday21 views

CVE-2026-18192 Vacron|IP Camera - Arbitrary File Read

VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS0.0038EPSS
SaveExploits0References2
CVE
CVE
added yesterday7 views

CVE-2026-18192

CVE-2026-18192 affects Vacron VIN-DS783E-E6 devices and concerns an Arbitrary File Read via Relative Path Traversal. Reported as an authenticated remote vulnerability with network access and low attack complexity; exploitation would enable reading arbitrary system files, exposing confidentiality ...

7.1CVSS6AI score0.0038EPSS
SaveExploits0References2
CVE
CVE
added yesterday9 views

CVE-2026-63233

CVE-2026-63233 is a SQL injection and unsafe deserialization vulnerability in Koollab LMS. The issue affects the assessment overall answer endpoint, where an authenticated attacker can inject SQL and influence data passed to unserialize(), potentially writing a webshell to a publicly accessible l...

9.9CVSS6.3AI score0.00296EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday4 views

EUVD-2026-50126

A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...

8.1CVSS5.9AI score0.00252EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday4 views

EUVD-2026-50122

An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server...

9.9CVSS6.2AI score0.00328EPSS
SaveExploits0References1
Nuclei
Nuclei
added yesterday24 views

BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability caused by improper validation of the 'READ.filePath' parameter in fileread script and SendCGICMD API, letting authenticated attackers read arbitrary system files. id: CVE-2019-25246 info: name: BEWARD...

8.8CVSS5.9AI score0.17393EPSS
SaveExploits1References3
Rows per page
Query Builder