Lucene search
+L

30907 matches found

Positive Technologies
Positive Technologies
added 2026/04/24 12:00 a.m.16 views

PT-2026-35011

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where the batadv tt prepare tvlv global data function calculates the allocation length for a global TT response using 16-bit temporaries. If a...

9.8CVSS5.8AI score0.00399EPSS
SaveExploits0
NVD
NVD
added 2026/04/23 10:16 p.m.32 views

CVE-2026-41335

OpenClaw before 2026.3.31 contains an information disclosure vulnerability in the Control Interface bootstrap JSON that exposes version and assistant agent identifiers. Attackers can extract sensitive fingerprinting information from the Control UI bootstrap payload to identify system versions and...

6.9CVSS0.00297EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/23 9:57 p.m.8 views

CVE-2026-41335

OpenClaw before 2026.3.31 contains an information disclosure vulnerability in the Control Interface bootstrap JSON that exposes version and assistant agent identifiers. Attackers can extract sensitive fingerprinting information from the Control UI bootstrap payload to identify system versions and...

6.9CVSS5.8AI score0.00297EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/23 9:24 p.m.10 views

CVE-2026-26210

KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balanceserve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all interfaces with no authentication and deserializes incoming messages using pickle.loads without validation. Attackers can...

9.8CVSS6.2AI score0.00703EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2026/04/23 9:15 p.m.13 views

Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer

Remote Code Execution via Unsafe Deserialization in Pipecat's LivekitFrameSerializer Summary A critical vulnerability exists in Pipecat's LivekitFrameSerializer – an optional, non-default, undocumented frame serializer class now deprecated intended for LiveKit integration. The class's deserialize...

9.8CVSS7.1AI score0.00701EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/04/23 7:45 p.m.350 views

CVE-2026-25874 LeRobot Unsafe Deserialization Remote Code Execution via gRPC

LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable...

9.3CVSS0.15547EPSS
SaveExploits1References5
GithubExploit
GithubExploit
added 2026/04/23 10:48 a.m.103 views

Web-Vulnerability-Tester

Web Vulnerability Tester Description Tests web applications...

5.8AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/04/23 8:06 a.m.11 views

esp: fix skb leak with espintcp and async crypto

...

7.1CVSS5.2AI score0.00129EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/04/22 8:25 p.m.1 views

@ainsleydev/payload-helper (>=0.0.1, <=0.0.2), @bsct/payload (1.0.0) +89 more potentially affected by CVE-2026-41683 via i18next-http-middleware (>=3.0.2, <=3.9.2)

i18next-http-middleware NPM version =3.0.2, =0.0.1, =1.0.1, =0.0.1, =0.0.1, =0.0.1, =8.0.0-alpha1, =3.0.0-rc.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.3 and more Source cves: CVE-2026-41683 Source advisory: OSV:GHSA-C3H8-G69V-PJRG...

8.6CVSS5.4AI score0.00327EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/04/22 8:25 p.m.1 views

@ainsleydev/payload-helper (>=0.0.1, <=0.0.2), @bsct/payload (1.0.0) +89 more potentially affected by CVE-2026-41683 via i18next-http-middleware (>=3.0.2, <=3.9.2)

i18next-http-middleware NPM version =3.0.2, =0.0.1, =1.0.1, =0.0.1, =0.0.1, =0.0.1, =8.0.0-alpha1, =3.0.0-rc.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.0.3 and more Source cves: CVE-2026-41683 Source advisory: SNYK:JS-I18NEXTHTTPMIDDLEWARE-16415527...

8.6CVSS5.4AI score0.00327EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/04/22 7:22 p.m.17 views

CVE-2026-40872

mailcow: dockerized is an open source groupware/email suite based on docker. In versions prior to 2026-03b, the admin dashboard's Autodiscover logs render the EMailAddress value logged as the "user" field without HTML escaping. By submitting an unauthenticated Autodiscover request with a crafted...

9.3CVSS5.8AI score0.0028EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/04/22 6:24 p.m.12 views

CVE-2026-31472

A flaw was found in the Linux kernel, specifically within the xfrm and iptfs components. A remote attacker could exploit this vulnerability by sending a specially crafted Encapsulating Security Payload ESP packet. This packet, containing an inner IPv4 header with a total length totlen of zero or...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/04/22 5:27 p.m.22 views

CI4MS: Backup Management Full Account Takeover for All Roles & Privilege Escalation via Stored DOM Blind XSS

An attacker can achieve Full Account Takeover and Privilege Escalation via Stored DOM XSS in the backup module's filename field, which is manipulated through an SQL file that tampers with the filename field to contain a hidden XSS payload...

9.1CVSS5.5AI score0.00331EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/04/22 4:16 p.m.15 views

CVE-2018-25260

MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload, paste it into the Server field via the CD menu's FreeDB...

8.6CVSS0.00214EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/04/22 3:31 p.m.12 views

EUVD-2026-24902

In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full, espoutputtailtcp will return an error and not free the skb, because with synchronous crypto, the common xfrm output code will drop the packe...

5.7AI score0.00129EPSS
SaveExploits0References9
CVE
CVE
added 2026/04/22 2:57 p.m.25 views

CVE-2018-25271

CVE-2018-25271 affects TextPad 8.1.2. The vulnerability stems from a buffer overflow in the Run command interface, where an excessively long input (a ~5000-byte payload) pasted into the Tools &gt; Run Command field can crash the application. Impact is a local Denial of Service with the attacker n...

6.9CVSS6.1AI score0.00183EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/22 2:57 p.m.8 views

CVE-2018-25269

ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encoded payloads in object and embed tags. Attackers can craft emails containing data URIs with embedded scripts that execute in the...

6.1CVSS5.7AI score0.0023EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/22 2:57 p.m.10 views

CVE-2018-25268

LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payload with 688 bytes of padding followed by 4 bytes of controlled data to crash the application or...

8.6CVSS6.2AI score0.00201EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/22 2:56 p.m.6 views

CVE-2018-25260

MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload, paste it into the Server field via the CD menu's FreeDB...

8.6CVSS6.8AI score0.00214EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2026/04/22 2:16 p.m.32 views

CVE-2026-31472

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: validate inner IPv4 header length in IPTFS payload Add validation of the inner IPv4 packet totlen and ihl fields parsed from decrypted IPTFS payloads in inputprocesspayload. A crafted ESP packet containing an inner...

5.5CVSS0.00121EPSS
SaveExploits0References3
Rows per page
Query Builder