Lucene search
+L

7085 matches found

GithubExploit
GithubExploit
added 2026/04/20 8:11 a.m.203 views

Exploit for CVE-2026-3462

CVE-2026-3462 Acrobat Reader | Improperly Controlled Modifica...

8.6CVSS7.3AI score0.07086EPSS
SaveExploits4
GithubExploit
GithubExploit
added 2026/04/16 1:9 p.m.114 views

cap-exploit-poc

cap-exploit-poc This repository contai...

5.8AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/04/15 7:19 p.m.10 views

dev.dsf:dsf-fhir-server-jetty (>=1.0.0 <=1.9.0), dev.dsf:dsf-tools-test-data-generator (>=1.0.0 <=1.9.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (>=1.0.0-M1 <=1.9.0)

dev.dsf:dsf-fhir-server MAVEN version =1.0.0-M1, =1.0.0, =1.0.0, =1.9.0 Source cves: CVE-2026-40939 Source advisory: OSV:GHSA-GJ7P-595X-QWF5...

6.8CVSS5.8AI score0.00154EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/04/15 7:19 p.m.10 views

dev.dsf:dsf-fhir-server-jetty (>=1.0.0 <=1.9.0), dev.dsf:dsf-tools-test-data-generator (>=1.0.0 <=1.9.0) potentially affected by CVE-2026-40939 via dev.dsf:dsf-fhir-server (>=1.0.0-M1 <=1.9.0)

dev.dsf:dsf-fhir-server MAVEN version =1.0.0-M1, =1.0.0, =1.0.0, =1.9.0 Source cves: CVE-2026-40939 Source advisory: SNYK:JAVA-DEVDSF-16540567...

6.8CVSS5.8AI score0.00154EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/04/15 7:3 a.m.9 views

CVE-2026-5088 Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts

Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts. The makesalt and makesaltbcrypt methods will attept to load Crypt::URandom and then Bytes::Random::Secure to generate random bytes for the salt. If those modules are unavailable, it will simply...

5.8AI score0.00572EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/04/14 5:19 a.m.128 views

CORScanner

CORS Exploiter Automated CORS misconfiguration scanner with...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/04/14 1:22 a.m.7 views

CVE-2026-40180

Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to 2.16.0 and 2.15.0-lts, the unzip method in ApicurioCodegenWrapper.java extracts ZIP entries without validating that the resolved file path stays within the intended output...

8.7CVSS5.8AI score0.00387EPSS
SaveExploits1References1
Snyk
Snyk
added 2026/04/13 3:25 p.m.8 views

Malicious Package

Overview viewer-assets-generator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS5.8AI score
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/04/12 7:27 p.m.130 views

web-pentest-tool

🛡️ AutoPenTest — Automated Penetration Testing Tool ⚠️ DI...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/04/10 8:16 p.m.9 views

CVE-2026-40180

Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to 2.16.0 and 2.15.0-lts, the unzip method in ApicurioCodegenWrapper.java extracts ZIP entries without validating that the resolved file path stays within the intended output...

8.7CVSS0.00387EPSS
SaveExploits1References3
CVE
CVE
added 2026/04/10 7:35 p.m.45 views

CVE-2026-40180

CVE-2026-40180 affects Quarkus OpenAPI Generator’s ApicurioCodegenWrapper unzip() path: entries are extracted without validating that the resolved path stays inside the output directory, constructing destination as new File(toOutputDir, entry.getName()). This can allow path traversal (e.g., ../.....

8.7CVSS5.8AI score0.00387EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
added 2026/04/10 7:35 p.m.10 views

EUVD-2026-21583

Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to 2.16.0 and 2.15.0-lts, the unzip method in ApicurioCodegenWrapper.java extracts ZIP entries without validating that the resolved file path stays within the intended output...

8.7CVSS5.8AI score0.00387EPSS
SaveExploits1References3
OSV
OSV
added 2026/04/10 7:35 p.m.9 views

CVE-2026-40180 Zip Slip Path Traversal in quarkus-openapi-generator ApicurioCodegenWrapper class

Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation. Prior to 2.16.0 and 2.15.0-lts, the unzip method in ApicurioCodegenWrapper.java extracts ZIP entries without validating that the resolved file path stays within the intended output...

8.7CVSS6AI score
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.17 views

Quarkus OpenAPI Generator 路径遍历漏洞

Quarkus OpenAPI Generator is an open-source code generation tool based on the OpenAPI specification, developed by Quarkiverse Hub. Versions of Quarkus OpenAPI Generator prior to 2.16.0 and 2.15.0-lts contained a path traversal vulnerability. This vulnerability stemmed from the unzip method in...

8.7CVSS5.9AI score0.00387EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2026/04/09 12:37 p.m.9 views

ruby: Properly initialize the random number generator when forking new process

Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issu...

5CVSS7AI score0.02582EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2026/04/09 12:37 p.m.9 views

ruby: Properly initialize the random number generator when forking new process

The SecureRandom.randombytes function in lib/securerandom.rb in Ruby before 1.8.7-p352 and 1.9.x before 1.9.2-p290 relies on PID values for initialization, which makes it easier for context-dependent attackers to predict the result string by leveraging knowledge of random strings obtained in an...

5CVSS7AI score0.0195EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/04/09 12:35 p.m.7 views

ruby: Properly initialize the random number generator when forking new process

Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900...

5CVSS7AI score0.02088EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/04/09 12:35 p.m.17 views

ruby: Properly initialize the random number generator when forking new process

Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issu...

5CVSS7AI score0.02582EPSS
SaveExploits1References4
RustSec
RustSec
added 2026/04/09 12:0 p.m.42 views

Rand is unsound with a custom logger using `rand::rng()`

It has been reported by @lopopolo that the rand library is unsound i.e. that safe code using the public API can cause Undefined Behaviour when all the following conditions are met: - The log and threadrng features are enabled - A custom logger is defined - The custom logger accesses rand::rng...

5.5AI score
SaveExploits0Affected Software1
OSV
OSV
added 2026/04/09 3:10 a.m.8 views

MAL-2026-2518 Malicious code in viewer-assets-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0022cddbfa3afc707bea5e0e70c8bff5b3249847bd891c628a1fd2d0dc9fa259 The package viewer-assets-generator was found to contain malicious code. Source: ghsa-malware...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder