CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

159 matches found

Kitploit•added 2026/10/25 9:02 a.m.•219 views

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

6.2AI score

SaveExploits0

Kitploit•added 2026/10/25 8:34 a.m.•15 views

adaptix-serverless-c2

Adaptix Serverless C2 Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure. Agent traffic appears as outbound HTTPS to AWS endpoints, requiring no inbound ports or public IPs on the C2 server. Architecture Kharon Agent target | | HTTPS GET/POST...

6.3AI score

SaveExploits0References2

Wolfi•added 2026/10/16 8:53 p.m.•12 views

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-aws-cloudfront, crossplane-provider-aws-s3, crossplane-provider-azure-storage, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-aws-eks, crossplane-provider-aws-sns, grafana,...

5.8AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•10 views

GHSA-RJ39-CV6W-8WV7 vulnerabilities

Vulnerabilities for packages: timoni, crossplane-provider-aws-kms, crossplane-provider-aws-cloudfront, crossplane-provider-aws-s3, crossplane-provider-azure-storage, crossplane-provider-aws-dynamodb, crossplane-provider-aws-ec2, crossplane-provider-aws-eks, crossplane-provider-aws-sns, grafana,...

5.8AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•11 views

GHSA-VRCC-3CH7-HPPW vulnerabilities

5.8AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•11 views

CVE-2026-100352 vulnerabilities

7.5CVSS7.2AI score0.00595EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•12 views

CVE-2026-100348 vulnerabilities

5.3CVSS5.9AI score0.00372EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•12 views

CVE-2026-100351 vulnerabilities

7.4CVSS7.2AI score0.00488EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•13 views

GHSA-FH4F-47MF-F2GJ vulnerabilities

5.8AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•11 views

CVE-2026-100353 vulnerabilities

7.5CVSS7.2AI score0.00335EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•11 views

CVE-2026-100354 vulnerabilities

7.5CVSS5.9AI score0.00435EPSS

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•12 views

GHSA-G8CF-RCJF-C8CF vulnerabilities

5.8AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•11 views

GHSA-MH7X-F8WQ-4JHX vulnerabilities

5.8AI score

SaveExploits0

Wolfi•added 2026/10/16 8:53 p.m.•12 views

CVE-2026-100347 vulnerabilities

5.3CVSS5.9AI score0.00515EPSS

SaveExploits0

vulnersOsv•added 2026/10/01 5:36 p.m.•5 views

com.amazonaws:athena-aws-cmdb (>=2026.28.1, <=2026.40.1), com.amazonaws:athena-cloudwatch (>=2026.28.1, <=2026.40.1) +196 more potentially affected by CVE-2026-68495 via com.fasterxml.jackson.dataformat:jackson-dataformat-cbor (>=2.22.0, <=2.22.1)

com.fasterxml.jackson.dataformat:jackson-dataformat-cbor MAVEN version =2.22.0, =2026.28.1, =2026.28.1, =2026.28.1, =2026.28.1, =2026.28.1, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.4.0, =2.22.0, =2.22.0, =0.11.0, =0.132.0, =0.142.0 and more Source cves: CVE-2026-68495 Source advisory: MEND:CVE-2026-684...

7.5CVSS5.8AI score0.00561EPSS

SaveExploits0

Rapid7 Vulnerability Database (full)•added 2026/09/12 12:00 a.m.•14 views

CVE-2026-90534: Authorization Bypass Through User-Controlled Key

Flowise is a low-code platform for building LLM applications. In versions up to and including 3.1.3, the POST /api/v1/node-load-method/:name endpoint is mounted without any route-level permission check and invokes component loadMethods with an attacker-controlled nodeName, loadMethod, inputs, and...

6.5CVSS5.7AI score0.0037EPSS

SaveExploits1References4

NVD•added 2026/09/04 6:18 p.m.•39 views

CVE-2026-85654

Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute...

7.8CVSS0.00212EPSS

SaveExploits0References2

EUVD•added 2026/09/04 5:05 p.m.•24 views

EUVD-2026-71635

7.8CVSS6.7AI score0.00212EPSS

SaveExploits0References2

CVE•added 2026/09/04 5:05 p.m.•98 views

CVE-2026-85654

Amazon awslabs.dynamodb-mcp-server contains a code injection vulnerability in its CDK generator component. The root cause is improper neutralization of special elements used in a template engine , allowing a context-dependent actor to execute arbitrary code on the host that deploys the generated ...

7.8CVSS6.7AI score0.00212EPSS

SaveExploits0References2

Vulnrichment•added 2026/09/04 5:05 p.m.•22 views

CVE-2026-85654 Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server

7.8CVSS6.7AI score0.00212EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by