Lucene search
+L

972673 matches found

EUVD
EUVD
added 3 days ago9 views

EUVD-2026-53709

A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12. This vulnerability affects the function PermissionManager.checkShellCommand of the file src/capabilities/permissions.ts of the component runcommand Handler. Such manipulation leads to incorrect privilege assignment. Th...

6.5CVSS4.9AI score0.00245EPSS
SaveExploits0References9
CVE
CVE
added 3 days ago27 views

CVE-2026-18995

CVE-2026-18995 affects netease-youdao LobsterAI 2026.6.10, specifically the function parseMediaTokensFromText in src/renderer/services/artifactParser.ts of the MEDIA Path Handler. The issue is a manipulation that leads to information disclosure. According to the reports, the attack can be perform...

5.3CVSS5.1AI score0.00282EPSS
SaveExploits0References6
EUVD
EUVD
added 3 days ago9 views

EUVD-2026-53708

A flaw has been found in netease-youdao LobsterAI 2026.6.10. This affects the function parseMediaTokensFromText of the file src/renderer/services/artifactParser.ts of the component MEDIA Path Handler. This manipulation causes information disclosure. The attack is possible to be carried out...

5.3CVSS5.1AI score0.00282EPSS
SaveExploits0References6
Cvelist
Cvelist
added 3 days ago33 views

CVE-2026-18995 netease-youdao LobsterAI MEDIA Path artifactParser.ts parseMediaTokensFromText information disclosure

A flaw has been found in netease-youdao LobsterAI 2026.6.10. This affects the function parseMediaTokensFromText of the file src/renderer/services/artifactParser.ts of the component MEDIA Path Handler. This manipulation causes information disclosure. The attack is possible to be carried out...

5.3CVSS0.00282EPSS
SaveExploits0References6
OSV
OSV
added 3 days ago5 views

CVE-2026-18995 netease-youdao LobsterAI MEDIA Path artifactParser.ts parseMediaTokensFromText information disclosure

A flaw has been found in netease-youdao LobsterAI 2026.6.10. This affects the function parseMediaTokensFromText of the file src/renderer/services/artifactParser.ts of the component MEDIA Path Handler. This manipulation causes information disclosure. The attack is possible to be carried out...

5.3CVSS5.1AI score
SaveExploits0References8
EUVD
EUVD
added 3 days ago10 views

EUVD-2026-53706

A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/modeltools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The explo...

6.5CVSS5.2AI score0.00214EPSS
SaveExploits0References8
CVE
CVE
added 3 days ago28 views

CVE-2026-18993

The CVE-2026-18993 entry relates to NousResearch hermes-agent, specifically the Memory Toolset component, file hermes-agent/model_tools.py. The description indicates improper access controls in this functionality and an exploitable condition that can be triggered remotely. Affected versions inclu...

6.5CVSS6.2AI score0.00214EPSS
SaveExploits0References8
Cvelist
Cvelist
added 3 days ago35 views

CVE-2026-18993 NousResearch hermes-agent Memory Toolset model_tools.py access control

A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. Affected by this issue is some unknown functionality of the file hermes-agent/modeltools.py of the component Memory Toolset. The manipulation results in improper access controls. The attack can be executed remotely. The explo...

6.5CVSS0.00214EPSS
SaveExploits0References8
EUVD
EUVD
added 3 days ago10 views

EUVD-2026-53705

A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vulnerability affects the function selecttools of the file agent/evolution/executor.py of the component Self-Evolution Review Agent. Performing a manipulation results in incorrect authorization. The attack is possible to be carri...

6.5CVSS5.2AI score0.00209EPSS
SaveExploits0References7
Cvelist
Cvelist
added 3 days ago34 views

CVE-2026-18992 zhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorization

A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vulnerability affects the function selecttools of the file agent/evolution/executor.py of the component Self-Evolution Review Agent. Performing a manipulation results in incorrect authorization. The attack is possible to be carri...

6.5CVSS0.00209EPSS
SaveExploits0References7
CVE
CVE
added 3 days ago33 views

CVE-2026-18992

The CVE concerns zhayujie CowAgent, specifically the Self-Evolution Review Agent, where the vulnerability affects the function _select_tools in agent/evolution/executor.py. Affects CowAgent up to version 2.1.1. The root cause is a manipulation that leads to incorrect authorization, enabling a rem...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References7
OSV
OSV
added 3 days ago5 views

CVE-2026-18992 zhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorization

A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vulnerability affects the function selecttools of the file agent/evolution/executor.py of the component Self-Evolution Review Agent. Performing a manipulation results in incorrect authorization. The attack is possible to be carri...

5.3CVSS5.1AI score
SaveExploits0References9
EUVD
EUVD
added 3 days ago11 views

EUVD-2026-53703

The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to read and delete arbitrar...

8.8CVSS6.5AI score0.00606EPSS
SaveExploits0References9
NVD
NVD
added 3 days ago9 views

CVE-2026-18991

A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp-tools/core.ts of the component sendfile. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00493EPSS
SaveExploits0References6
NVD
NVD
added 3 days ago9 views

CVE-2026-18990

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The...

7.5CVSS0.00397EPSS
SaveExploits0References6
Nuclei
Nuclei
added 3 days ago28 views

DotNetNuke 9.2 - 9.2.1 - Weak Encryption & Cookie Deserialization

DNN DotNetNuke versions 9.2 through 9.2.1 use a weak encryption algorithm to protect input parameters. This cryptographic weakness enables attackers to craft malicious DNNPersonalization cookies that can be deserialized, leading to remote code execution. id: CVE-2018-15811 info: name: DotNetNuke...

7.5CVSS7.5AI score0.74048EPSS
SaveExploits5References4
Nuclei
Nuclei
added 3 days ago275 views

ManageEngine Desktop Central Java Deserialization

Zoho ManageEngine Desktop Central before 10.0.474 is vulnerable to a deserialization of untrusted data, which permits remote code execution. id: CVE-2020-10189 info: name: ManageEngine Desktop Central Java Deserialization author: king-alexander severity: critical description: | Zoho ManageEngine...

10CVSS8.4AI score0.99941EPSS
SaveExploits6References5
Nuclei
Nuclei
added 3 days ago99 views

DedeCMS 5.7SP2 - Cross-Site Request Forgery/Remote Code Execution

DedeCMS 5.7SP2 is susceptible to cross-site request forgery with a corresponding impact of arbitrary code execution because the partcode parameter in a tagtestaction.php request can specify a runphp field in conjunction with PHP code. id: CVE-2018-7700 info: name: DedeCMS 5.7SP2 - Cross-Site...

8.8CVSS8AI score0.74519EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 3 days ago13 views

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

7.5CVSS7.5AI score0.00492EPSS
SaveExploits0References5
Cvelist
Cvelist
added 3 days ago30 views

CVE-2026-18991 nanocoai NanoClaw send_file core.ts path traversal

A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the file container/agent-runner/src/mcp-tools/core.ts of the component sendfile. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00493EPSS
SaveExploits0References6
Rows per page
Query Builder