Lucene search
+L

92792 matches found

Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71843

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

5.3CVSS5.3AI score0.00357EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71935

A vulnerability has been found in DTStack Taier 1.4.0. Affected is the function MultipartFile.getOriginalFilename of the file UploadController.java of the component Upload Controller. The manipulation of the argument File leads to path traversal. The attack may be initiated remotely. Upgrading to...

5.8CVSS4.7AI score0.00399EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71822

IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

7.6CVSS5.7AI score0.00309EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.6 views

PT-2026-71829

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can bypass security restrictions because of improper validation of anti-CSRF tokens. Cross-Site Request Forgery CSRF is a type of attack that tricks a victim into...

8.1CVSS5.3AI score0.00167EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71821

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability...

8.5CVSS5.4AI score0.00405EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71869

Name of the Vulnerable Software and Affected Versions Tenda CH7 versions prior to 20260625 Tenda CH7G versions prior to 20260625 Tenda CH10 versions prior to 20260625 Tenda CP3 versions prior to 20260625 Tenda CP3 Pro versions prior to 20260625 Tenda CP7 versions prior to 20260625 Tenda TC3B14C...

6.3CVSS4.5AI score0.00402EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.6 views

PT-2026-71852

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths...

9.8CVSS5.8AI score0.00611EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.10 views

PT-2026-71815

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...

8.1CVSS5.3AI score0.00353EPSS
SaveExploits0References2
Redos
Redos
added 2026/08/13 12:00 a.m.7 views

ROS-20260813-73-0003

The vulnerability in podman is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS8.8AI score0.00607EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.6 views

PT-2026-71655

Name of the Vulnerable Software and Affected Versions rsync versions 3.4.2 through 3.4.x Description A denial of service issue exists where a remote sender can exhaust system resources on the receiver. This occurs because the short alias --zt for the --compress-threads option bypasses the string...

9.1CVSS5.3AI score0.00566EPSS
SaveExploits0References103
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71893

A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0. Affected is the function explore url of the file src/mcp-rdf-explorer/server.py of the component MCP Server. Performing a manipulation of the argument url results in server-side request forgery. The attack may be...

7.5CVSS7.1AI score0.00278EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71726

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote attackers can bypass security restrictions because the system does not properly validate client-asserted identity. Recommendations At the moment, there is no information about a newer version...

8.1CVSS5.2AI score0.00347EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71748

A vulnerability has been found in Calix GigaSpire 26.1.0. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact...

5.3CVSS4.8AI score0.00345EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71629

Name of the Vulnerable Software and Affected Versions rsync daemon versions prior to 3.5.0 Description An IP address spoofing issue exists that allows unauthenticated remote attackers to bypass IP-based access controls. By sending a crafted PROXY protocol header containing a forged source address...

9.1CVSS5.2AI score0.00501EPSS
SaveExploits0References101
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.3 views

PT-2026-71652

Name of the Vulnerable Software and Affected Versions rsync versions 3.1.0 through 3.4.x Description An access control bypass exists that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during hostname-based access control evaluation. When a DNS lookup f...

9.2CVSS5.2AI score0.00525EPSS
SaveExploits0References103
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71927

Name of the Vulnerable Software and Affected Versions Dromara lamp-cloud versions prior to 5.10.1 Description A path traversal issue exists in the Code Generator component within the DefGenProjectController.java file. A remote attacker can exploit this by manipulating the outputDir, parent, or...

6.5CVSS6.3AI score0.00288EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.8 views

PT-2026-71809

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow...

8.6CVSS5.8AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.10 views

PT-2026-71823

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A time-of-check to time-of-use TOCTOU race condition involving symbolic links allows a remote authenticated attacker to gain unauthorized access to system objects. TOCTOU is a software bug where a...

8.5CVSS5.3AI score0.00254EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71674

A vulnerability was found in SourceCodester Simple Student Information System. Affected by this vulnerability is an unknown functionality of the file app/admin/departments/view department.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be...

7.5CVSS7.1AI score0.00328EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.6 views

PT-2026-71831

A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManager ParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument...

6.3CVSS4.5AI score0.00308EPSS
SaveExploits0References7
Rows per page
Query Builder