6258 matches found
EUVD-2026-51108
The SSH service on BSH ELP Electronic Platform modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorizedkeys file for the root user. An attacker in possession of the...
PT-2026-66471
The SSH service on BSH ELP Electronic Platform modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized keys file for the root user. An attacker in possession of the...
Exploit for CVE-2026-61511
CVE-2026-61511 – Proof of Concept For educational and aut...
CVE-2026-17161
The CVE-2026-17161 entry documents a Stored Cross-Site Scripting vulnerability in the WowStore – Store Builder & Product Blocks for WordPress plugin. Affected: WordPress plugin WowStore (Product Blocks) up to version 4.4.24. Vulnerable component: the filterMobileText Block Attribute; root cause i...
CVE-2026-12144 Wholesale for WooCommerce <= 2.0.5 - Authenticated (Author+) Privilege Escalation via 'user_role_set' Parameter
The Wholesale for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This is due to the saverequestsmeta function applying only sanitizetextfield to the userroleset POST parameter before passing it directly to WPUser::addrole, with ...
MAL-2026-11126 Malicious code in app-sim-layer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8470a75b327a72623ec4379302a2fc6ecdbaa302acf4fa1e39f1c688103562be package.json declares a postinstall hook that runs node test.js on npm install; test.js invokes fromstr2 and fromstr1 in index.js. fromstr2 fetches...
Exploit for Use After Free in Linux Linux_Kernel
cve-id Donate Support the maintenance of this project wit...
Malicious code in app-soda-layer (npm)
app-soda-layer 2.1.6 is an npm credential stealer and SSH backdoor that runs automatically on npm install through a postinstall hook test.js. It harvests Solana keypairs id.json, config.toml and .env secrets, then installs an operator-supplied SSH key into /.ssh/authorizedkeys and opens port 22 f...
Exploit for Code Injection in N8N
cve-id Donate Support the maintenance of this project wit...
PT-2026-65008
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...
PT-2026-65016
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network...
PT-2026-65032
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network...
Exploit for Command Injection in Microsoft
cve-id Donate Support the maintenance of this project wit...
Exploit for Improper Authorization in Microsoft
cve-id Donate Support the maintenance of this project wit...
Exploit for CVE-2026-16723
cve-id Donate Support the maintenance of this project wit...
EUVD-2026-48454
Improper authorization in Azure Red Hat OpenShift ARO allows an authorized attacker to elevate privileges over a network...
EUVD-2026-48451
Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...
EUVD-2026-48453
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...
