Lucene search
+L

93875 matches found

Cvelist
Cvelist
added 2026/08/19 4:35 p.m.33 views

CVE-2026-75583 keeper.sh Calendar version prior to 2.18.14 SSRF Guard Bypass via DNS Rebinding

keeper.sh's calendar module version prior to 2.18.14 contains a server-side request forgery SSRF guard bypass vulnerability that allows authenticated attackers to reach private network addresses by exploiting a DNS rebinding attack against the two-phase URL validation and connection flow. The SSR...

3.5CVSS0.00204EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/19 4:20 p.m.34 views

CVE-2026-20314 Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability

A vulnerability in Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper inpu...

5CVSS0.00277EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/19 4:13 p.m.14 views

CVE-2026-48162 Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh manager

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta3, DistributedAPI.sendtmpfile in framework/wazuh/core/cluster/dapi/dapi.py joins an attacker-controlled tmpfile value to WAZUHPATH without canonicalization or...

9.1CVSS5.5AI score
SaveExploits0References7
EUVD
EUVD
added 2026/08/19 4:13 p.m.9 views

EUVD-2026-62556

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta3, DistributedAPI.sendtmpfile in framework/wazuh/core/cluster/dapi/dapi.py joins an attacker-controlled tmpfile value to WAZUHPATH without canonicalization or...

9.1CVSS5.3AI score0.00626EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/19 4:00 p.m.34 views

CVE-2026-64852 Grav API Plugin: Missing authorization on API-key generate/revoke lets any admin.login user forge keys for any account

Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.8, the Grav API plugin intercepts the apiKeyGenerate and apiKeyRevoke admin tasks in user/plugins/api/api.php and authorizes the caller with only admin.login. A basic panel user c...

8.7CVSS0.00303EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/19 4:00 p.m.5 views

CVE-2026-64852 Grav API Plugin: Missing authorization on API-key generate/revoke lets any admin.login user forge keys for any account

Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Prior to 1.0.8, the Grav API plugin intercepts the apiKeyGenerate and apiKeyRevoke admin tasks in user/plugins/api/api.php and authorizes the caller with only admin.login. A basic panel user c...

8.7CVSS5.4AI score0.00266EPSS
SaveExploits0References5
Cisco
Cisco
added 2026/08/19 4:00 p.m.6 views

Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability

A vulnerability in Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper inpu...

5CVSS5.8AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 3:18 p.m.6 views

CVE-2026-75952

Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory 6.2.3 - Tokens were missing on many AJAX/state-changing tasks: contact/quote forms, cart, bookmarks, uploads, messages, AI text generation, and several administrator actions app install, demo-data wipe,...

4.6CVSS0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 3:01 p.m.42 views

CVE-2026-67268

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery...

6.5CVSS0.00103EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 3:01 p.m.8 views

EUVD-2026-62526

Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery...

6.5CVSS5.3AI score0.00103EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/19 2:53 p.m.7 views

CVE-2026-40509 OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameter

OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer. The webpath GET parameter in the DICOM viewer page is embedded unsanitized as a URL without validation against expected path formats. An attacker can craft a URL that causes an authenticated user with...

5.3CVSS5.5AI score
SaveExploits0References7
CVE
CVE
added 2026/08/19 2:53 p.m.8 views

CVE-2026-40509

OpenEMR before 8.3.0 is affected by a cross-site request forgery (CSRF) vulnerability in the DICOM viewer . The web_path GET parameter is embedded unsanitized as a URL without validation against expected path formats. An attacker can craft a malicious URL that causes an authenticated user holding...

5.3CVSS5.4AI score0.00128EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/19 2:53 p.m.9 views

EUVD-2026-62510

OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer. The webpath GET parameter in the DICOM viewer page is embedded unsanitized as a URL without validation against expected path formats. An attacker can craft a URL that causes an authenticated user with...

5.3CVSS5.4AI score0.00128EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/19 2:47 p.m.8 views

EUVD-2026-62502

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.19.3, 4.20.2, 5.0.6, and 6.2.1, the HTTPArtifact::receive flow can treat an unsigned embedded SAML Response as cryptographically valid for the wrong identity provider. SOAPClient::addSSLValidator...

8.7CVSS5.6AI score0.00344EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/08/19 2:46 p.m.5 views

CVE-2026-75952 Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory < 6.2.3

Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory 6.2.3 - Tokens were missing on many AJAX/state-changing tasks: contact/quote forms, cart, bookmarks, uploads, messages, AI text generation, and several administrator actions app install, demo-data wipe,...

4.6CVSS5.2AI score0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 2:46 p.m.36 views

CVE-2026-75952 Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory < 6.2.3

Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory 6.2.3 - Tokens were missing on many AJAX/state-changing tasks: contact/quote forms, cart, bookmarks, uploads, messages, AI text generation, and several administrator actions app install, demo-data wipe,...

4.6CVSS0.00159EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 2:27 p.m.10 views

EUVD-2026-62417

Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secret vulnerability in the Mosquitto MQTT broker's authentication plugin that allows unauthenticated attackers to forge valid JWT tokens by extracting the secret from the firmware image. Attackers can use the...

9.3CVSS5.6AI score0.00404EPSS
SaveExploits1References2
CVE
CVE
added 2026/08/19 2:27 p.m.28 views

CVE-2026-71960

Cudy WR3000 2.0 firmware before 2.5.24 ships a hard-coded JWT HMAC signing secret in its Mosquitto MQTT broker authentication plugin. Attackers can extract the secret from the firmware image to forge valid JWT tokens, bypassing authentication to the device's mesh networking interface with CVSS 9....

9.3CVSS5.5AI score0.00404EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/08/19 2:23 p.m.29 views

CVE-2026-76203 CSS sanitizer bypass in Pentestify report themes allows forced outbound requests

Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that...

5.1CVSS0.00289EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/19 2:17 p.m.4 views

CVE-2026-76225

ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher LOAD CSV implementation that fails to validate HTTP/HTTPS URLs. Authenticated attackers can craft LOAD CSV queries pointing to internal network addresses or cloud metadata endpoints to make the ArcadeDB...

8.3CVSS0.00258EPSS
SaveExploits0References2
Rows per page
Query Builder