Lucene search
+L

9409 matches found

Cvelist
Cvelist
added 2026/05/25 12:30 a.m.43 views

CVE-2026-9410 Sushmi-pal Invoice-System Profile Workflow profile improper authorization

A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This vulnerability affects unknown code of the file /profile of the component Profile Workflow. Such manipulation of the argument ID leads to improper authorization. It is possible to launc...

5.3CVSS0.00198EPSS
SaveExploits0References4
Circl
Circl
added 2026/05/22 10:0 p.m.13 views

CVE-2026-47373

creationtimestamp| type| source ---|---|--- 2026-05-22 22:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmhwoid5co26...

7.5CVSS5.8AI score0.00393EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/22 1:16 p.m.15 views

OESA-2026-2360 python-pip security update

%changelog Thu Apr 9 2026 yixiangzhike [email protected] - 23.3.1-10 - Fix CVE-2026-25645 Security Fixes: pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavio...

4.6CVSS5.8AI score0.00144EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/22 2:3 a.m.7 views

ECHO-2DA5-FEA1-604D

Bulletin has no description...

8.8CVSS5.7AI score0.00796EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.9 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath12k: Handle lock during peerid find The ath12kpeerfindbyid function requires that the caller holds the ab-baselock. Currently, the WBM error path does not hold the lock, and calling that function leads to the following...

5.2AI score0.00202EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.7 views

Astra Linux – Vulnerability in opensc

A flaw was discovered in OpenSC packages that could allow for a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length PIN is passed. This issue poses a security risk, especially for OS...

6.6CVSS6.9AI score0.00925EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/19 3:59 p.m.6 views

MINI-H6PQ-HFVJ-H96Q

Bulletin has no description...

6.1CVSS5.7AI score0.00108EPSS
SaveExploits0
OSV
OSV
added 2026/05/18 3:45 p.m.5 views

MINI-GFQ6-W36R-F39C

Bulletin has no description...

5.3CVSS5.7AI score0.00264EPSS
SaveExploits0
OSV
OSV
added 2026/05/17 12:32 p.m.5 views

MINI-M965-97W5-6JGG

Bulletin has no description...

6.1CVSS5.7AI score0.00314EPSS
SaveExploits0
OSV
OSV
added 2026/05/16 8:46 p.m.13 views

MINI-89PH-WV9C-V45G

Bulletin has no description...

7.5CVSS6.2AI score0.0043EPSS
SaveExploits0
OSV
OSV
added 2026/05/16 3:1 p.m.8 views

MINI-9XRF-4G6P-4FCJ

Bulletin has no description...

7.5CVSS5.7AI score0.00471EPSS
SaveExploits0
OSV
OSV
added 2026/05/15 6:17 p.m.12 views

GHSA-QXVM-R42F-5P8J AVideo's Meet plugin: `uploadRecordedVideo.json.php` derives `users_id` from the uploaded filename and calls passwordless `User->login()`, allowing any caller with the Meet shared secret to obtain a session as arbitrary users including admin

Summary Type: Authorization-bypass via user-controlled identifier. The Meet plugin's recorded-video upload endpoint plugin/Meet/uploadRecordedVideo.json.php authenticates the caller using a single shared Authorization: Bearer against $objM-secret. Once that check passes, the endpoint reads the...

8.1CVSS5.9AI score0.00453EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/15 1:46 p.m.13 views

ECHO-0ADD-693B-F63C

Bulletin has no description...

8.8CVSS5.7AI score0.00234EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/14 8:48 a.m.5 views

BIT-MODSECURITY2-2026-42268 ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. From 3.0.0 to before 3.0.15, there is an unhandled exception std::outofrange caused by unsigned integer underflow in libmodsecurity3 if the user administrator uses a rule any of @verifySSN...

8.2CVSS5.6AI score0.00396EPSS
SaveExploits1References2
OSV
OSV
added 2026/05/13 2:32 p.m.3 views

MINI-3Q5Q-3754-VXQJ

Bulletin has no description...

7.5CVSS5.7AI score0.00429EPSS
SaveExploits1
Packet Storm News
Packet Storm News
added 2026/05/13 12:0 a.m.19 views

Identifying AI Web Scrapers Using Canary Tokens

From pre-training to query-time augmentation, web-scraped data helps to improve the quality and contextual relevancy of content generated by large language models LLMs. However, large-scale web scraping to feed LLMs can affect site stability and raise legal, privacy, or ethics concerns. If websit...

5.7AI score
SaveExploits0
Nextcloud
Nextcloud
added 2026/05/12 9:9 a.m.24 views

PIN bypass in PassCodeActivity via back button

None...

4.6CVSS5.8AI score0.00153EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/05/12 3:47 a.m.6 views

MINI-6CQW-W7J4-2CQM

Bulletin has no description...

6.1CVSS5.7AI score0.00314EPSS
SaveExploits0
OSV
OSV
added 2026/05/11 11:20 p.m.5 views

MINI-GG9W-5PRV-6XVG

Bulletin has no description...

6.1CVSS5.7AI score0.00314EPSS
SaveExploits0
OSV
OSV
added 2026/05/11 7:33 p.m.5 views

MINI-6W33-MXX2-XHV6

Bulletin has no description...

5.3CVSS5.7AI score0.0039EPSS
SaveExploits0
Rows per page
Query Builder