Lucene search
+L

93915 matches found

Vulnrichment
Vulnrichment
added 2026/08/13 6:48 p.m.12 views

CVE-2026-73481 phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules

phpList before 3.7.0-RC5 fail to enforce CSRF token validation on the bounce rule deletion endpoint bouncerules.php / bouncerule.php. The deletion is performed via a GET request ?page=bouncerules&del=N, and the central CSRF check verifyCsrfGetToken is invoked with enforce=false, so it only...

5.4CVSS5.6AI score0.00149EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/13 6:23 p.m.12 views

EUVD-2026-58198

Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without DNS resolution. Unauthenticated attackers can supply hostnames that bypass string validation but resolve to...

8.6CVSS5.5AI score0.00317EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/13 6:18 p.m.8 views

CVE-2026-73567

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by [email protected], which seeds an ARC4 strea...

9.1CVSS0.00321EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/13 6:18 p.m.9 views

CVE-2026-67614

CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSocket on port 8888. Attackers can craft a forged JWT signed...

9.8CVSS0.00552EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/13 5:40 p.m.31 views

CVE-2026-73567 sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by [email protected], which seeds an ARC4 strea...

9.1CVSS0.00321EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/13 5:40 p.m.10 views

EUVD-2026-58182

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by [email protected], which seeds an ARC4 strea...

9.1CVSS5.3AI score0.00321EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/13 5:17 p.m.6 views

CVE-2026-58314

Two SSRF findings in Gitea 1.26.2...

7.7CVSS0.00295EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/13 5:08 p.m.9 views

EUVD-2026-58129

CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSocket on port 8888. Attackers can craft a forged JWT signed...

9.8CVSS5.4AI score0.00552EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/13 5:08 p.m.54 views

CVE-2026-67614

CVE-2026-67614 affects CyberPanel prior to 3.0.0. A hard-coded JWT secret in the WebTerminal FastAPI SSH service allows unauthenticated remote attackers to forge valid tokens and obtain an interactive root shell via WebSocket on port 8888. An attacker can craft a forged JWT signed with the hardco...

9.8CVSS5.4AI score0.00552EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/13 4:44 p.m.31 views

CVE-2026-58314 Two SSRF findings in Gitea 1.26.2

Two SSRF findings in Gitea 1.26.2...

0.00295EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/13 4:19 p.m.5 views

CVE-2026-73576

In Zimbra Collaboration ZCS before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated using an insecure random number generator, resulting in insufficient entropy. An attacker who obtains a JWT signed with...

6.3CVSS0.00188EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/13 3:26 p.m.12 views

EUVD-2026-58075

In Zimbra Collaboration ZCS before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated using an insecure random number generator, resulting in insufficient entropy. An attacker who obtains a JWT signed with...

6.3CVSS5.3AI score0.00188EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/13 3:26 p.m.23 views

CVE-2026-73576

CVE-2026-73576 affects Zimbra Collaboration (ZCS) before 10.1.17 via the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated with an insecure RNG, yielding insufficient entropy. This may allow offline brute-forcing to recover the JWT signing secret, enabling JWT forgery and po...

6.3CVSS5.3AI score0.00188EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/13 3:24 p.m.11 views

CVE-2026-73575

In Zimbra Collaboration ZCS before 10.1.17, a Cross-Site Request Forgery CSRF vulnerability exists in the Exchange Web Services EWS endpoint of Zimbra Collaboration ZCS due to insufficient validation of request content types. An attacker can exploit this vulnerability by causing an authenticated...

3.1CVSS5.3AI score0.00112EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/13 3:24 p.m.17 views

CVE-2026-73575

CVE-2026-73575 affects Zimbra Collaboration (ZCS) pre-10.1.17. A CSRF vulnerability exists in the Exchange Web Services (EWS) endpoint caused by insufficient validation of request content types. An attacker could induce an authenticated user to submit a crafted request, potentially allowing unaut...

3.1CVSS5.3AI score0.00112EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/13 3:19 p.m.7 views

CVE-2026-53788

rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...

6.9CVSS0.00251EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/13 2:36 p.m.9 views

CVE-2026-53788 rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping

rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...

6.9CVSS5.5AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/08/13 2:36 p.m.8 views

CVE-2026-53788

rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...

6.9CVSS5.3AI score0.00251EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/13 2:36 p.m.47 views

CVE-2026-53788 rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping

rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...

6.9CVSS0.00251EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/13 2:36 p.m.22 views

CVE-2026-53788

CVE-2026-53788 affects rsync prior to 3.5.0. A newline injection in the name-converter uid/gid mapping interface lets local attackers forge protocol messages by embedding newline characters in user/group names, causing the rsync daemon to treat attacker-controlled data as legitimate protocol inpu...

6.9CVSS5.3AI score0.00251EPSS
SaveExploits0References3
Rows per page
Query Builder