Lucene search
+L

108836 matches found

Cvelist
Cvelist
added yesterday30 views

CVE-2026-66839

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability CWE-428. An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges...

8.4CVSS0.00135EPSS
SaveExploits0References3
CVE
CVE
added yesterday26 views

CVE-2026-66839

CVE-2026-66839 concerns NetKids iMark from Integrated Systems Technologies, Inc., with an Unquoted Search Path or Element (CWE-428). The issue allows an authenticated attacker to execute arbitrary code with SYSTEM privileges via a local attack vector. Affected software is specified as NetKids iMa...

8.4CVSS6AI score0.00135EPSS
SaveExploits0References3
CVE
CVE
added yesterday26 views

CVE-2026-66344

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2026-66344.

6.7CVSS6AI score0.00116EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-66344

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability CWE-427. An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges...

6.7CVSS6AI score0.00116EPSS
SaveExploits0References4
EUVD
EUVD
added yesterday6 views

EUVD-2026-53043

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability CWE-427. An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges...

6.7CVSS6AI score0.00116EPSS
SaveExploits0References3
Cvelist
Cvelist
added yesterday27 views

CVE-2026-66344

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability CWE-427. An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges...

6.7CVSS0.00116EPSS
SaveExploits0References3
NVD
NVD
added yesterday4 views

CVE-2026-18907

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename...

0.00241EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday7 views

EUVD-2026-53021

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename...

5.6AI score0.00241EPSS
SaveExploits0References1
CVE
CVE
added yesterday14 views

CVE-2026-18907

CVE-2026-18907 describes a path traversal vulnerability in the Android app com.talpa.hibrowser (version 2.23.1.1) where the Download File feature allows arbitrary file writes via directory traversal sequences in the filename. Affected component: Download File feature; Root cause: improper sanitiz...

5.6AI score0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday30 views

CVE-2026-18907 PathTravelsal Vulnerability in com.talpa.hibrowser

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename...

0.00241EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday7 views

Malicious code in platform-ui-island (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e678a3a4d4b9e16e6d6223aaa0c6ccaca9b7f2ac95e47940af4e706548e0f111 The package's index.js unconditionally loads bridge.js on require. bridge.js downloads a platform-specific native binary from obfuscated Cloudflare...

5.7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday7 views

Malicious code in tinkoff-component-infopanel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1465530b7853077d8b3fb7896478a69f62f6506df775d2e959b3d9bae6861f11 On require of the package, platform.js downloads a platform-specific native binary from hardcoded Cloudflare Workers hosts...

5.6AI score
SaveExploits0References2
EUVD
EUVD
added yesterday8 views

EUVD-2026-53016

A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
EUVD
EUVD
added yesterday9 views

EUVD-2026-53009

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

5.3CVSS5.4AI score0.00167EPSS
SaveExploits0References6
EUVD
EUVD
added yesterday10 views

EUVD-2026-52995

open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend...

5.8AI score0.00141EPSS
SaveExploits0References2
NVD
NVD
added yesterday7 views

CVE-2026-18853

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

5.3CVSS0.00167EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday5 views

Malicious code in sextant-cli-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab426dad8f1e5722f2836debe2f93730df98b7c109865426208edb687955b30 sextant-cli-linux-amd64 ships a Linux amd64 Go binary that, on execution, connects to a hardcoded WebRTC signaling relay at wss://relay.sextant.top a...

5.7AI score
SaveExploits0References25
Jenkins Security Advisories
Jenkins Security Advisories
added yesterday7 views

Agent-to-controller deserialization filter bypass

Jenkins uses the https://github.com/jenkinsci/remotingRemoting library typically agent.jar or remoting.jar for communication between the controller and agents via serialized Java objects. To protect against deserialization vulnerabilities, Jenkins enforces the https://jenkins.io/jep/200JEP-200...

9CVSS5.9AI score
SaveExploits0Affected Software1
CVE
CVE
added yesterday15 views

CVE-2026-67866

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the LockedStaMacProcessMsgDeleteMonitoredItemsResponse and SOPCStaMacNewDeleteMonitoredItems in the client wrapper DeleteMonitoredItems path...

7.5CVSS5.6AI score
SaveExploits0References4
Jenkins Security Advisories
Jenkins Security Advisories
added yesterday7 views

Path traversal vulnerability in file parameters

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal in file parameter names. This allows attackers with Item/Configure and Item/Build permission to write files to arbitrary locations on the controller file system, restricted only by file...

8.8CVSS6.1AI score
SaveExploits0Affected Software1
Rows per page
Query Builder