Lucene search
K

6720 matches found

Packet Storm News
Packet Storm News
added 2026/02/04 12:0 a.m.3 views

Post-Quantum Identity-Based TLS for 5G Service-Based Architecture and Cloud-Native Infrastructure

Cloud-native application platforms and latency-sensitive systems such as 5G Core networks rely heavily on certificate-based Public Key Infrastructure PKI and mutual TLS to secure service-to-service communication. While effective, this model introduces significant operational and performance...

5.5AI score
Exploits0
Patchstack
Patchstack
added 2026/02/03 11:5 p.m.5 views

WordPress Extended Random Number Generator plugin <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via Settings vulnerability discovered by 0x34rth in WordPress Plugin Extended Random Number Generator versions = 1.1...

4.4CVSS5.3AI score0.0025EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/03 9:18 a.m.4 views

CVE-2026-1745

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

5.3CVSS4.8AI score0.00159EPSS
Exploits1References1
GithubExploit
GithubExploit
added 2026/02/03 8:44 a.m.150 views

Exploit for CVE-2024-28397

CVE-2024-28397: Js2Py Sandbox Escape Payload Generator !Pyth...

5.3CVSS6.1AI score0.04548EPSS
Exploits22
OSV
OSV
added 2026/02/03 3:57 a.m.4 views

MAL-2026-663 Malicious code in transform-async-generator-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338773642b9997fc33cd7f4eb7cfbca20019115fc184de55077b8b112a45dcc4 The package transform-async-generator-functions was found to contain malicious code. Source: ghsa-malware...

5.5AI score
Exploits0References1
Snyk
Snyk
added 2026/02/03 3:57 a.m.2 views

Malicious Package

Overview transform-async-generator-functions is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

9.8CVSS5.4AI score
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/02/02 2:36 p.m.6 views

@backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator

Impact A path traversal vulnerability in the TechDocs local generator allows attackers to read arbitrary files from the host filesystem when Backstage is configured with techdocs.generator.runIn: local. When processing documentation from untrusted sources, symlinks within the docs directory are...

6.5CVSS5.5AI score0.00387EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2026/02/02 2:36 p.m.5 views

GHSA-W669-JJ7H-88M9 @backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator

Impact A path traversal vulnerability in the TechDocs local generator allows attackers to read arbitrary files from the host filesystem when Backstage is configured with techdocs.generator.runIn: local. When processing documentation from untrusted sources, symlinks within the docs directory are...

5.3CVSS5.5AI score0.00387EPSS
Exploits0References4
Patchstack
Patchstack
added 2026/02/02 7:11 a.m.10 views

WordPress PDF Generator Addon for Elementor Page Builder plugin <= 2.0.0 - Unauthenticated Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download vulnerability discovered by stealthcopter in WordPress Plugin PDF Generator Addon for Elementor Page Builder versions = 2.0.0...

7.5CVSS7.3AI score0.07486EPSS
Exploits3References1Affected Software1
OSV
OSV
added 2026/02/02 6:16 a.m.4 views

CVE-2026-1745

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

4.3CVSS5.4AI score0.00159EPSS
Exploits1References6
NVD
NVD
added 2026/02/02 6:16 a.m.6 views

CVE-2026-1745

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

5.3CVSS0.00159EPSS
Exploits1References6
CVE
CVE
added 2026/02/02 5:2 a.m.13 views

CVE-2026-1745

CVE-2026-1745 affects SourceCodester Medical Certificate Generator App 1.0. The issue is a cross-site request forgery (CSRF) in an unknown part of the application, allowing remote exploitation. Public PoC/exploit references exist (e.g., proof-of-concept CSRF exploit). Connected advisories consist...

5.3CVSS5.5AI score0.00159EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2026/02/02 5:2 a.m.31 views

CVE-2026-1745 SourceCodester Medical Certificate Generator App cross-site request forgery

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

5.3CVSS0.00159EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2026/02/02 5:2 a.m.3 views

CVE-2026-1745

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

5.3CVSS5.5AI score0.00159EPSS
Exploits1References6Affected Software1
EUVD
EUVD
added 2026/02/02 5:2 a.m.3 views

EUVD-2026-5094

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

5.3CVSS4.8AI score0.00159EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2026/02/02 5:2 a.m.4 views

CVE-2026-1745 SourceCodester Medical Certificate Generator App cross-site request forgery

A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

5.3CVSS4.8AI score0.00159EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/02/02 12:0 a.m.5 views

SourceCodester Medical Certificate Generator App 安全漏洞

The SourceCodester Medical Certificate Generator App is an open-source medical certification generator developed by SourceCodester. Version 1.0 of the SourceCodester Medical Certificate Generator App contains a security vulnerability. This vulnerability stems from an unknown issue involving...

5.3CVSS5.7AI score0.00159EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2026/02/02 12:0 a.m.5 views

EulerOS 2.0 SP13 : bind (EulerOS-SA-2026-1217)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In specific circumstances, due to a weakness in the Pseudo Random Number Generator PRNG that is used, it is possible for an attacker to predict the...

8.6CVSS5.6AI score0.00509EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/01/30 9:51 p.m.2 views

CVE-2026-25152 @backstage/plugin-techdocs-node vulnerable to possible Path Traversal in TechDocs Local Generator

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.js functionalities for TechDocs. In versions of @backstage/plugin-techdocs-node prior to 1.13.11 and 1.14.1, a path traversal vulnerability in the TechDocs local generator allow...

5.3CVSS5.6AI score0.00387EPSS
Exploits0References1
Snyk
Snyk
added 2026/01/30 9:51 p.m.5 views

Directory Traversal

Overview @backstage/plugin-techdocs-node is a Common node.js functionalities for TechDocs, to be shared between techdocs-backend plugin and techdocs-cli Affected versions of this package are vulnerable to Directory Traversal via the TechdocsGenerator function when processing documentation from...

7CVSS6.5AI score0.00387EPSS
Exploits0References2
Rows per page
Query Builder