37127 matches found
CVE-2026-83001
creationtimestamp| type| source ---|---|--- 2026-09-15 22:12:51+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnh2543y2p 2026-09-15 23:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlr7ajaea2r...
CVE-2024-48652
CVE-2024-48652 Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field Steps to Reproduce: 1.Open the URL: http://127.0.0.1/admin/dashboard 2.Log in using admin credentials. 3.Navigate to the "Settings" section...
CVE-2024-43363
CVE-2024-43363 CVE-2024-43363 Exploit Script This Python script is designed to test if a Cacti instance is vulnerable to CVE-2024-43363, a Remote Code Execution RCE vulnerability caused by log poisoning. How the Vulnerability Works: root@kitploit: Log Poisoning: An attacker injects PHP code into...
CVE-2024-10914__POC
CVE-2024-10914 - Proof of Concept Exploit for command injection vulnerability in the /cgi-bin/accountmgr.cgi endpoint. This vulnerability allows arbitrary command execution on the affected system through unsanitized parameters. Vulnerability Description CVE-2024-10914 is a command injection...
CVE-2026-55690 EmbedVideo Extension: Stored XSS via unsanitized service name in exception text
The EmbedVideo Extension is a MediaWiki extension which adds a parser function called ev and various parser tags for embedding video clips from various video sharing services. Prior to 4.1.0, EmbedServiceFactory::newFromName in includes/EmbedService/EmbedServiceFactory.php interpolates an...
CVE-2017-11882
CVE-2017-11882 Overview From the perspective of exploit effectiveness, it can kill all versions of Office from 2003 to 2016, and the entire attack environment is very simple to build. This vulnerability is caused by the Equation Editor in Office software. Because the editor process does not...
CVE-2026-55636
Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.6, charts/capsule/templates/configuration.yaml configures the validating webhook with namespace/finalize instead of the Kubernetes resource name namespaces/finalize. A user with namespaces/finalize RBAC c...
CVE-2026-55636
Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.6, charts/capsule/templates/configuration.yaml configures the validating webhook with namespace/finalize instead of the Kubernetes resource name namespaces/finalize. A user with namespaces/finalize RBAC c...
CVE-2026-85013 Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters
A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml commands, the malicious module name, containing shell...
CVE-2026-92053
creationtimestamp| type| source ---|---|--- 2026-09-15 14:56:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3werc75hd2cir 2026-09-17 04:47:13+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260917...
CVE-2026-55158 Conflibot: Command injection via crafted pull request branch names under pull_request_target
Conflibot warns in advance when merging a pull request will cause conflicts in other open pull requests. Prior to 1.2.1, src/index.ts builds git checkout, git merge, and git format-patch commands by interpolating the attacker-controlled pull request head.ref value into strings passed to exec. In...
postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
A flaw was found in PostgreSQL. An object creator can exploit a stack buffer overflow vulnerability within the argument name matching component. By manipulating the OUT parameter count, an attacker can write limited arbitrary bytes 0x0 and 0x1 to server memory, which may lead to unknown impacts...
CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity
CVE-2026-5556 – Kubernetes Admission Controller Bypass via Case Sensitivity Program Code Python admission webhook + exploit root@kitploit: !/usr/bin/env python3 admissionwebhook.py - Vulnerable webhook that rejects pods with specific name from flask import Flask, request, jsonify app = Flaskname...
CVE-2026-17495 moment vulnerable to Path Traversal via crafted non-string locale name
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
CVE-2026-91771
Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.download function, allowing path traversal attacks. Attackers controlling the backend can supply file names with directory traversal sequences to write files outside the intended download...
PT-2026-91830
Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.download function, allowing path traversal attacks. Attackers controlling the backend can supply file names with directory traversal sequences to write files outside the intended download...
CVE-2026-90824
creationtimestamp| type| source ---|---|--- 2026-09-14 22:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7h7zntzavp3gr...
CVE-2026-18116 Concrete CMS 8.3.0 to 9.5.2 is vulnerable to Stored XSS in Calendar Event Name via Workflow Approval Notifications
Concrete CMS 8.3.0 to 9.5.2 stored calendar event names without sanitization and rendered them without HTML escaping in the workflow approval and deletion notifications shown in the dashboard "Waiting For Me" block. A registered user permitted to add events to a calendar governed by an approval...
CVE-2026-18116 Concrete CMS 8.3.0 to 9.5.2 is vulnerable to Stored XSS in Calendar Event Name via Workflow Approval Notifications
Concrete CMS 8.3.0 to 9.5.2 stored calendar event names without sanitization and rendered them without HTML escaping in the workflow approval and deletion notifications shown in the dashboard "Waiting For Me" block. A registered user permitted to add events to a calendar governed by an approval...