DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

cve-search

cve-search cve-search は、CVE Common Vulnerabilities and Exposures および CPE Common Platform Enumeration を MongoDB にインポートして、CVE の検索と処理を容易にするツールです。 このソフトウェアの主な目的は、公開 CVE データベースへの直接かつ公開の検索を避けることです。ローカル検索は通常より高速で、機密クエリをインターネット経由で制限することができます。 cve-search には、脆弱性と関連情報を保存するバックエンド、脆弱性の検索と管理のための直感的な Web...

Cisco Unified Communications Manager 7/8/9 - Directory Traversal

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...

T3-Technology-CPE-Advisories

T3 Technology CPE — Security Advisories Multiple critical vulnerabilities discovered in T3 Technology CPE ONU/Router devices deployed by TrueOnline Thailand. Vulnerabilities CVE ID| Severity| Summary ---|---|--- CVE-2026-35904| 4.3 Medium| Unauthenticated Telnet Enable via CGI CVE-2026-35905| 8.8...

CVE-2026-2035703-x300

CVE-2026-2035703: Tozed ZLT X300 5G CPE — Execução Remota de Código como Root via Estação Rádio Base Rogue SDR Status: Sob divulgação coordenada embargo de 90 dias Descoberta: 2026-08-08 Pesquisador: Muhammad Nadeem Danish danish1162 ID CVE: CVE-2026-2035703 Gravidade: Crítica CVSS 9.8 CWE: CWE-7...

go-cpe

go-cpe Una libreria Go per CPE Common Platform Enumeration 2.3 go-cpe è un'implementazione degli algoritmi di Naming e Matching del CPE, come descritto nei NIST IR 7695 e 7696. Per l'implementazione Java di riferimento, vedi:...

CVE-2026-55637

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCPLISTENADDR value 127.0.0.1:8080 when MCPAUTHTOKEN is unset and the httpSrv.Startaddr branch does not validate th...

CVE-2026-55637 genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCPLISTENADDR value 127.0.0.1:8080 when MCPAUTHTOKEN is unset and the httpSrv.Startaddr branch does not validate th...

CVE-2026-55637 genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCPLISTENADDR value 127.0.0.1:8080 when MCPAUTHTOKEN is unset and the httpSrv.Startaddr branch does not validate th...

CVE-2026-55637

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2 , the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default address 127.0.0.1:8080 when MCP_AUTH_TOKEN is unset, without validating Host or Origin headers. A malicious websit...

PT-2026-81459

Name of the Vulnerable Software and Affected Versions genieacs-mcp versions prior to 0.3.2 Description The Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp endpoint on the default address 127.0.0.1:8080 when the MCP AUTH TOKEN variable is unset. The server fails to...

CVE-2026-62442

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:45+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71062

creationtimestamp| type| source ---|---|--- 2026-08-19 13:35:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwvco7x2l 2026-08-19 16:45:12+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 14:37:06+00:00| seen|...

CVE-2026-71060

CVE-2026-71060 affects Oracle Hyperion Financial Management 11.2.25.0.000 (Security component). A high-privileged remote attacker via HTTP can gain unauthorized access to critical data. CVSS 4.4 MEDIUM. Patch details are not provided in the available documents; consult Oracle's August 2026 CPU ad...

CVE-2026-60759

CVE-2026-60759 affects the Internal Operations component of Oracle Internet Procurement Connector in E-Business Suite versions 12.2.3 through 12.2.15. An unauthenticated, network-based attacker can exploit it to gain unauthorized read and write access to critical procurement data. CVSS 3.1 base s...

CVE-2026-62726

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-UNASSIGNED-2020-ZYXEL-CPE-COMMAND-INJECTION-RCE-01

creationtimestamp| type| source ---|---|--- 2026-06-30 09:39:37+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7a5b5786-b418-4a38-b09b-03ba93dca08c...

Pulse Connect Secure SSL VPN Arbitrary File Read

Pulse Secure Pulse Connect Secure PCS 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 all contain an arbitrary file reading vulnerability that could allow unauthenticated remote attackers to send a specially crafted URI to gain improper access. id: CVE-2019-11510 info: name: Pulse...