Lucene search
+L

69733 matches found

Packet Storm News
Packet Storm News
added 2026/06/09 12:00 a.m.64 views

Samba Print Exposure Auditor

This is an exposure assessment tool designed to evaluate whether a Samba print service exposes printer-related RPC functionality to anonymous users through the spoolss endpoint...

5.5AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.20 views

PT-2026-47967

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when a program reads data past the...

3.3CVSS6.9AI score0.00437EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.28 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the iouring/waitid operation not clearing the waitid information before copying it to the user...

5.5CVSS5.3AI score0.00114EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.17 views

PT-2026-47885

Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally...

5.5CVSS5.4AI score0.00404EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.30 views

PT-2026-47798

The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC handlers without proper path validation. An attacker with JavaScript execution in the renderer e.g. via XSS or a malicious plugin, can read, write, or delete arbitrary files on the user's...

8.7CVSS5.8AI score0.00137EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.16 views

PT-2026-47886

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description Exposure of sensitive information in Windows Shell allows an authorized attacker to disclose information locally, which can affect the system. Recommendations At the moment, there is no...

6.5CVSS5.1AI score0.00816EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.27 views

PT-2026-47887

Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description An out-of-bounds read in Windows Remote Desktop Protocol RDP allows an unauthorized attacker to disclose information over a network. This issue enables unauthenticated snooping of sensiti...

7.8CVSS5.5AI score0.00871EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.23 views

PT-2026-47718

Name of the Vulnerable Software and Affected Versions Apache Answer versions prior to 2.0.1 Description The unlisted question feature fails to enforce access restrictions on direct API endpoints. This allows authenticated users to discover and access unlisted questions, including their answers,...

6.5CVSS5.2AI score0.00313EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.19 views

PT-2026-47900

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description An issue in Windows Hyper-V allows an authorized attacker to locally disclose sensitive information to an unauthorized actor, which can affect the system. Recommendations At the momen...

5.5CVSS5AI score0.00459EPSS
SaveExploits0References5
Packet Storm
Packet Storm
added 2026/06/09 12:00 a.m.108 views

📄 Python-Multipart Path Traversal

This code bundle contains two separate components related to the path traversal vulnerability affecting Python-Multipart versions prior to 0.0.22. ================================================================================================================================== | Title :...

8.6CVSS6.5AI score0.02208EPSS
SaveExploits5
Redos
Redos
added 2026/06/09 12:00 a.m.24 views

ROS-20260609-73-0001

The vulnerability of the IndexedDB component in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the exposure of information. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected informati...

6.5CVSS5.5AI score0.04938EPSS
SaveExploits1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.28 views

MongoDB Server 安全漏洞

MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which stems from the...

7.1CVSS5.3AI score0.00103EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.23 views

WordPress plugin Slider Revolution 信息泄露漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.5AI score0.00252EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/09 12:00 a.m.23 views

EulerOS 2.0 SP11 : tigervnc (EulerOS-SA-2026-2230)

According to the versions of the tigervnc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application...

9.8CVSS5.6AI score0.00247EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.22 views

Fortinet FortiPortal 访问控制错误漏洞

Fortinet FortiPortal is a network security management portal product that primarily provides features such as network visualization, configuration management, and security policy monitoring. Fortinet FortiPortal has a access control vulnerability. This vulnerability stems from an inability to...

6.5CVSS6.6AI score0.00201EPSS
SaveExploits0References2
Adobe
Adobe
added 2026/06/09 12:00 a.m.61 views

APSB26-62 : Security update available for Adobe Dreamweaver

Adobe has released a security update for Adobe Dreamweaver. This update resolves critical and important vulnerabilities that could lead to arbitrary code execution, memory exposure, and arbitrary file system read...

5.8AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.23 views

PT-2026-49833

Name of the Vulnerable Software and Affected Versions rabbitmq-c affected versions not specified Description A heap buffer overflow occurs during the AMQP login handshake. This issue is triggered by an undersized connection.tune.frame max value, which can lead to memory corruption when the system...

7.1CVSS6.4AI score
SaveExploits0References19
Tenable Nessus
Tenable Nessus
added 2026/06/09 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-46315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/waitid: clear waitid info before copying it to userspace IORINGOPWAITID stores its result fields in struct iowaitid::info and later copies them to...

5.5CVSS5.5AI score0.00114EPSS
SaveExploits0References3
Adobe
Adobe
added 2026/06/09 12:00 a.m.57 views

APSB26-58 : Security update available for Adobe InDesign

Adobe has released a security update for Adobe InDesign. This update addresses critical and important vulnerabilities that could lead to arbitrary code execution, application denial-of-service, and memory exposure...

5.8AI score
SaveExploits0Affected Software1
Spring Security Advisories
Spring Security Advisories
added 2026/06/09 12:00 a.m.22 views

cve-2026-41696 - MEDIUM - Spring Data MongoDB Bind Parameter Literal Quoting Breakout

cve-2026-41696 - MEDIUM - Spring Data MongoDB Bind Parameter Literal Quoting Breakout...

5.9CVSS6.1AI score0.00262EPSS
SaveExploits0
Rows per page
Query Builder