232334 matches found
CVE-2026-40204
None None None No publicly available exploits are known...
CVE-2026-40018
None None None No publicly available exploits are known...
CVE-2026-40018
None None None No publicly available exploits are known...
ArchiveBox
🗃 Open source self-hosted web archiving. Takes URLs/browser history/bookmarks/Pocket/Pinboard/etc., saves HTML, JS, PDFs, media, and more...
Exploit for Eval Injection in Langflow
Project-CVE-2...
CVE-2026-73827
SOY Calendar is affected by a cross-site scripting (XSS) vulnerability that allows an arbitrary script to be executed in the web browser of a user who is logging into the product. The vulnerability requires low privileges and active user interaction , with a CVSS 3.0 base score of 5.4 (MEDIUM) an...
Exploit for CVE-2026-70463
CVE-2026-70463...
Root-My-Galaxy-Payloads-Testing
Root My Galaxy Payloads This repository contains the device-s...
EUVD-2026-67298
A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...
CVE-2026-81847
A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipelinetools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and coul...
GraftyVul: Synthesising Insecure Programs through Real-World Vulnerability Grafting
Vulnerability datasets underpin a wide range of security research, including vulnerability detection, automated remediation, and secure code generation. However, existing datasets sacrifice at least one of three desirable properties: diversity of language or vulnerability type,...
PT-2026-83083
A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component upload image. Performing a manipulation of the argument image path results in path traversal. The attack can be initiated remotely. The...
CVE-2026-81834 RooCodeInc Roo-Code README File ExecaTerminalProcess code injection
A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to th...
CVE-2026-81833 RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection
A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/helpers.ts of the component CodeIndexManager. Performing a manipulation results in code injection. Remote exploitation of the attack is...
Exploit for CVE-2026-19295
Description Proof o...
cross-site-scripting
No d...
CVE-2026-81560
A vulnerability was identified in blackms aistack up to 1.6.1. Affected by this issue is some unknown functionality of the file src/web/server.ts of the component Static File Handler. Such manipulation of the argument req.url leads to path traversal. The attack can be executed remotely. The explo...
Exploit for CVE-2020-14750
No d...
Exploit for Improper Check or Handling of Exceptional Conditions in Apple Safari
Project-CV...
CVE-2026-81560 blackms aistack Static File server.ts path traversal
A vulnerability was identified in blackms aistack up to 1.6.1. Affected by this issue is some unknown functionality of the file src/web/server.ts of the component Static File Handler. Such manipulation of the argument req.url leads to path traversal. The attack can be executed remotely. The explo...