59153 matches found
π phpMyFAQ 4.0.16 Improper Authorization
phpMyFAQ versions 4.0.16 and below suffer from an improper authorization vulnerability. Exploit Title: phpMyFAQ = 4.0.16 - Improper Authorization Google Dork: N/A Date: 2026-01-23 Exploit Author: GUIA BRAHIM FOUAD Vendor Homepage: https://www.phpmyfaq.de/ Software Link:...
Python Notebook MCP θ·―εΎιεζΌζ΄
Python Notebook MCP is an interactive tool developed by Usama Khatab, allowing AI assistants to operate Jupyter notebooks. Python Notebook MCP has a path traversal vulnerability, which stems from issues with the functions createnotebook/readnotebook/editcell/addcell in the file server.py,...
PT-2026-47382
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/userq component where stale wptr mapping is accessed. This occurs when the wptr obj is unmapped while queue creation is in progress, allowing another...
GHSA-FC86-6RV6-2JPM
creationtimestamp| type| source ---|---|--- 2026-05-04 23:40:29+00:00| seen| https://gist.github.com/alon710/279687d56a2dbfb6a69dcdc1e458b314...
GHSA-QG5C-HVR5-HJGR
creationtimestamp| type| source ---|---|--- 2026-05-04 23:31:29+00:00| seen| https://gist.github.com/limcheekin/b22dc88a260c8e395b6d84d05bd62a04...
CVE-2026-7780
creationtimestamp| type| source ---|---|--- 2026-05-04 23:16:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2sjl3hup2h...
CVE-2026-31341
creationtimestamp| type| source ---|---|--- 2026-05-04 23:00:24+00:00| seen| Telegram/GTfIJoyF1Lt3B5gz7lJdoSnmGz0vERHomtjpDmxFXmb5k8w...
CVE-2026-41927
creationtimestamp| type| source ---|---|--- 2026-05-04 22:39:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2qh4cjwc2v...
CVE-2025-67796
creationtimestamp| type| source ---|---|--- 2026-05-04 22:36:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2qcmt5sh2i 2026-05-05 20:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4xz7gi4l2s...
CVE-2026-42231
creationtimestamp| type| source ---|---|--- 2026-05-04 20:51:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2kgiomm52p 2026-05-05 07:14:35+00:00| seen| https://ccb.belgium.be/advisories/warning-critical-vulnerabilities-n8n-patch-immediately-0 2026-05-11 03:41:08+00:00| seen|...
CVE-2026-7508
A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of the file resources/views/pages/show.blade.php of the component Page Creation Handler. Performing a manipulation of the argument body results in code injection. Remote exploitation of the attack is possible...
CVE-2026-43864
creationtimestamp| type| source ---|---|--- 2026-05-04 20:12:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116518129175813131...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read through improper bounds checking in the CreateInstanceFromBackup and CreateInstanceFromMigration functions. An attacker can cause the daemon to crash by submitting a crafted backup archive with physical snapshot...
CVE-2025-47405
creationtimestamp| type| source ---|---|--- 2026-05-04 19:07:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2emokys72g...
CVE-2026-42090
creationtimestamp| type| source ---|---|--- 2026-05-04 18:02:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2axckja62n...
Missing Authorization
Overview org.apache.polaris:polaris-runtime-service is an a catalog for data lakes. It provides new levels of choice, flexibility and control over data, with full enterprise security and Apache Iceberg interoperability across a multitude of engines and infrastructure Affected versions of this...
CVE-2026-42809
Apache Polaris can issue broad temporary "vended" storage credentials during staged table creation before the effective table location has been validated or durably reserved. Those temporary credentials are meant to limit the scope of accessible table data and metadata, but this scope limitation...
CVE-2026-42078
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdowntabletoimage. This issue has been patched via commit 418491a...