356 matches found
nuclei-templates v10.4.8
Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...
SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's modcgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances firmware...
GCVE-1-2026-20208
creationtimestamp| type| source ---|---|--- 2026-08-24 09:56:31+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e8b8d385-eeed-46ce-9754-6cc7d1b4061c...
Spring Cloud - Remote Code Execution
Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions are susceptible to remote code execution vulnerabilities. When using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and...
Exploit for CVE-2026-03200
Patch: CVE-2026-03200 Vulnerability Details - CVE: CVE...
Exploit for CVE-2026-04321
Patch: CVE-2026-04321 Vulnerability Details - CVE: CVE...
Exploit for CVE-2026-09881
Patch: CVE-2026-09881 Vulnerability Details - CVE: CVE...
Exploit for CVE-2026-14290
Patch: CVE-2026-14290 Vulnerability Details - CVE: CVE...
Exploit for CVE-2026-15502
Patch: CVE-2026-15502 Vulnerability Details - CVE: CVE...
Langflow 1.10.0 Remote Code Execution
Langflow versions 1.10.0 and below are susceptible to unauthenticated remote code execution. By chaining /api/v1/autologin with /api/v1/validate/code, a remote unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. frozenstringliteral: true This module requires...
CVE-2025-10164
creationtimestamp| type| source ---|---|--- 2026-08-23 11:00:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5775be7d-1a29-41ee-bdff-b6026e93023f 2026-08-24 01:11:00+00:00| exploited|...
CVE-2021-27691
creationtimestamp| type| source ---|---|--- 2026-08-23 10:15:05+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2026-08-22 2026-08-23 11:00:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/39ee7ca1-fe23-494e-8a9e-ae5f349620a0...
ThreatLens: Evidence-Guided Ranking of High-Priority CVEs
Security teams must prioritize vulnerabilities before exploitation evidence is complete. Existing signals, such as CVSS, EPSS, advisories, and public exploits, are useful but fragmented and time-sensitive; retrospective rankings can therefore overstate performance by using evidence unavailable at...
MINI-M4QR-79X8-XHXX
Bulletin has no description...
VulnCheck KEV: CVE-2026-57739
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter: from n/a through = 10.11.0...
Exploit for Improper Authentication in Apple Macos
CVE-2026-65400 — macOS Screen Sharing pre-auth root file read...
VulnCheck KEV: CVE-2026-61979
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
VulnCheck KEV: CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network...
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities KEV catalog, stating they are being exploited in the wild. The shortcomings added to the KEV catalog are listed below - CVE-2026-65400 CVSS score: 9...