Lucene search
+L

24306 matches found

CNNVD
CNNVD
added 2026/05/26 12:0 a.m.22 views

Mirasvit Full Page Cache Warmer for Magento 2 代码问题漏洞

Mirasvit Full Page Cache Warmer for Magento 2 is a caching preheating extension developed by the American company Mirasvit for Magento 2. Versions prior to 1.11.12 of Mirasvit Full Page Cache Warmer for Magento 2 contained a code vulnerability. This vulnerability stemmed from the lack of...

9.8CVSS6.2AI score0.27546EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.25 views

PT-2026-43258

Name of the Vulnerable Software and Affected Versions Mirasvit Full Page Cache Warmer for Magento 2 versions prior to 1.11.12 Description A PHP object injection issue exists due to the unrestricted use of the native unserialize function. Unauthenticated attackers can achieve remote code execution...

9.8CVSS6.6AI score0.27546EPSS
SaveExploits1References72
GithubExploit
GithubExploit
added 2026/05/25 11:46 p.m.119 views

-authencesn-poc

authencesn-poc Mrowl made by c0redev https://unitdev.run...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/05/25 11:29 a.m.21 views

CVE-2026-43503

A flaw was found in the Linux kernel's networking skbuff component. When skbtrycoalesce attaches paged fragments, it can lose the SKBFLSHAREDFRAG marker. This can lead to the Encapsulating Security Payload ESP input decrypting data in place over page-cache backed fragments, potentially resulting ...

8.8CVSS6.4AI score0.00337EPSS
SaveExploits7References4
RedhatCVE
RedhatCVE
added 2026/05/25 7:52 a.m.29 views

CVE-2026-44572

A flaw was found in Next.js. An external client could exploit this vulnerability by sending a x-nextjs-data header on a request to a path handled by middleware that returns a redirect. This action could cause the middleware or proxy to incorrectly process the request as a data request, replacing...

5.9CVSS5.7AI score0.00284EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/25 12:0 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-43503

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers pskbcopyfclone and skbshift fail to propagate the...

8.8CVSS6.4AI score0.00337EPSS
SaveExploits7References2
Tenable Nessus
Tenable Nessus
added 2026/05/25 12:0 a.m.33 views

Linux Distros Unpatched Vulnerability : CVE-2026-44572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, an external client could send a x-nextjs-data...

5.9CVSS5.8AI score0.00284EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/05/24 12:49 a.m.24 views

SUSE CVE-2026-43503

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers pskbcopyfclone and skbshift fail to propagate the SKBFLSHAREDFRAG bit in skbshinfo-flags when moving frags from source to...

8.8CVSS5.8AI score0.00337EPSS
SaveExploits7References138
RedHat Linux
RedHat Linux
added 2026/05/23 8:39 p.m.3 views

unbound: Unbound: Cache manipulation via 'ghost domain names' attack

A flaw was found in NLnet Labs Unbound. A remote attacker, by controlling a malicious domain a "ghost zone" and querying a vulnerable Unbound server, could exploit a vulnerability related to "ghost domain names" attacks. This could allow the attacker to overwrite cached Name Server NS records,...

8.7CVSS5.8AI score0.00136EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/05/23 8:39 p.m.6 views

unbound: Unbound DNS Cache Poisoning via Promiscuous Additional Section RRSet Acceptance

A flaw was found in Unbound's handling of DNS reply messages, complementing the earlier CVE-2025-11411 fix. Unbound accepts and caches address records from the additional section of DNS replies when they accompany authority section RRSets other than NS such as MX records. A malicious actor who ca...

10CVSS6AI score0.00249EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/05/23 8:39 p.m.8 views

unbound: Unbound DNSSEC Validator NSEC3 Hash Calculation Limit Bypass via Negative Cache Code Path Leading to DoS

A flaw was found in Unbound's DNSSEC validator where the code path for consulting the negative cache for DS records does not honor the limit on NSEC3 hash calculations introduced in version 1.19.1. An adversary who controls a DNSSEC-signed zone can sign NSEC3 records with high iteration counts fo...

6.9CVSS6.1AI score0.00339EPSS
SaveExploits0References4
Fedora
Fedora
added 2026/05/23 4:1 p.m.17 views

[SECURITY] Fedora 42 Update: docker-buildkit-0.30.0-1.fc42

Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...

5.5CVSS7.1AI score0.00099EPSS
SaveExploits0
EUVD
EUVD
added 2026/05/22 7:32 p.m.16 views

EUVD-2026-31494

Mantis Bug Tracker MantisBT is an open source issue tracker. In versions 2.28.1 and below, improper escaping of the redirection page retrieved from the request's Referer header allows an attacker to inject HTML. While this is generally not directly actionable as modern browsers will URL-encode...

6.9CVSS5.3AI score0.00447EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/05/22 7:32 p.m.10 views

CVE-2026-40598 MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page

Mantis Bug Tracker MantisBT is an open source issue tracker. In versions 2.28.1 and below, improper escaping of the redirection page retrieved from the request's Referer header allows an attacker to inject HTML. While this is generally not directly actionable as modern browsers will URL-encode...

6.9CVSS5.3AI score0.00447EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/05/22 6:54 p.m.152 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

Copy Fail — Python PoC CVE-2026-31431 This is a compact Pyt...

7.8CVSS7.3AI score0.99907EPSS
SaveExploits237
OSV
OSV
added 2026/05/22 1:17 p.m.23 views

OESA-2026-2389 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS5.9AI score0.01849EPSS
SaveExploits4References17
OSV
OSV
added 2026/05/22 1:17 p.m.24 views

OESA-2026-2388 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS5.9AI score0.01849EPSS
SaveExploits4References17
OSV
OSV
added 2026/05/22 1:17 p.m.22 views

OESA-2026-2387 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS5.9AI score0.01849EPSS
SaveExploits4References16
OSV
OSV
added 2026/05/22 1:17 p.m.19 views

OESA-2026-2386 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS5.9AI score0.01849EPSS
SaveExploits4References17
Snyk
Snyk
added 2026/05/22 1:14 p.m.21 views

Improper Authentication

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6CVSS5.8AI score0.00093EPSS
SaveExploits0References3
Rows per page
Query Builder