232409 matches found
Exploit for Path Traversal in Aiohttp
No d...
CVE-2024-14045 OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper authorization
A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Product Supplier Edit Controller. Executing a manipulation can lead to improper authorization. The attack m...
CVE-2024-14045 OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper authorization
A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Product Supplier Edit Controller. Executing a manipulation can lead to improper authorization. The attack m...
CVE-2024-14045 OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper authorization
A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Product Supplier Edit Controller. Executing a manipulation can lead to improper authorization. The attack m...
CVE-2026-72422
A flaw was found in ksmbd, the in-kernel SMB3 server for Linux. A remote attacker could exploit a use-after-free vulnerability by sending specially crafted concurrent SMB2 NEGOTIATE requests on the same connection. This could lead to memory corruption, potentially allowing the attacker to execute...
CVE-2026-72198
A flaw was found in the Linux kernel's NTFS file system driver. This vulnerability arises from the incorrect handling of non-resident records for attributes that are expected to be resident. This can lead to 'union confusion paths' where the kernel attempts to read data from an incorrect memory...
BELL-CVE-2026-72444
Bulletin has no description...
cve-exploit-mapper
cve-exploit-mapper Keyless CVE → exploit / PoC URL aggregator...
getsploit v3.0.1
Getsploit Search and download public exploits from theVulners database — online, or fully offline from a local index. Get an API key · Vulners search · Changelog · Architecture · Security policy !Getsploit searching online, building a local FTS5 index, then searching and mirroring...
CVE-2026-75090
A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convertgguftohftokenizer of the file mistralrs-core/src/gguf/gguftokenizer.rs of the component GGUF Tokenizer. The manipulation of the argument eostokenid/bostokenid/unknowntokenid results...
CVE-2026-75094
A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub44B438 of the file /cgi-bin/mbox-config?method=SET§ion=ptestssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. Th...
MINI-HVH4-C4MH-GQV4
Bulletin has no description...
Exploit for Improper Authentication in Apple Macos
cve-id Donate Support the maintenance of this project wit...
EUVD-2026-60566
A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub44B438 of the file /cgi-bin/mbox-config?method=SET§ion=ptestssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. Th...
CVE-2026-75094
COMFAST CF-N1-S firmware 2.6.0.1 has an OS command injection flaw in the CGI endpoint /cgi-bin/mbox-config?method=SET§ion=ptest_ssid (function sub_44B438): the ssid parameter is passed unsanitized to a shell, enabling remote attackers with high privileges to execute arbitrary OS commands. CVS...
CVE-2026-75094 COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection
A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub44B438 of the file /cgi-bin/mbox-config?method=SET§ion=ptestssid of the component CGI Interface. This manipulation of the argument ssid causes os command injection. Remote exploitation of the attack is possible. Th...
CVE-2026-75093
A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::fromrawdtalign of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. T...
CVE-2026-75093 sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size
A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::fromrawdtalign of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. T...
CVE-2026-75093 sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size
A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::fromrawdtalign of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. T...
CVE-2026-75093 sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size
A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::fromrawdtalign of the file data/src/tensor.rs of the component ONNX Initializer Loader. Such manipulation leads to incorrect calculation of buffer size. The attack may be launched remotely. T...