Lucene search
+L

981135 matches found

Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71928

A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated...

7.5CVSS6.9AI score0.00424EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71818

IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

7.5CVSS5.3AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71831

A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManager ParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument...

6.3CVSS4.5AI score0.00308EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71842

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authentication may allow a remote attacker to execute arbitrary code or obtain sensitive information. Recommendations At the moment, there is no information about a newer version that contain...

8.3CVSS5.9AI score0.00409EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71841

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...

7.3CVSS5.2AI score0.00326EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.3 views

PT-2026-71853

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...

8.6CVSS5.3AI score0.003EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.8 views

PT-2026-71815

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing...

8.1CVSS5.3AI score0.00353EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71661

rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of a heap allocation by supplying a crafted files-from entry. Attackers can trigger the vulnerability against a read-only rsyn...

8.8CVSS5.4AI score0.00509EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.3 views

PT-2026-71814

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...

8.1CVSS5.4AI score0.00411EPSS
SaveExploits0References2
Redos
Redos
added 2026/08/13 12:00 a.m.7 views

ROS-20260813-73-0003

The vulnerability in podman is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS8.8AI score0.00607EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-48553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the...

7.7CVSS5.9AI score0.00523EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-29035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to...

8.3CVSS6AI score0.00467EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-53783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated...

8.6CVSS5.3AI score0.00374EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/13 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-53790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious...

9.2CVSS6.2AI score0.00515EPSS
SaveExploits0References4
Redos
Redos
added 2026/08/13 12:00 a.m.6 views

ROS-20260813-73-0053

The vulnerability in Golang is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS8.4AI score0.00382EPSS
SaveExploits0
Packet Storm
Packet Storm
added 2026/08/13 12:00 a.m.9 views

Webmin Help Template Authenticated Remote Code Execution

Webmin's help system accepts template variables via query parameters and processes them through the eval function. This allows an authenticated user to execute commands with root privileges. Versions prior to 2.640 appear to be affected. Webmin Help Template Authenticated Remote Code Execution...

5.6AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71741

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource allocation...

7.5CVSS5.3AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.5 views

PT-2026-71744

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...

7.5CVSS5.3AI score0.00386EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71855

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking...

5.3CVSS5.3AI score0.00289EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.3 views

PT-2026-71738

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a buffer overflow...

5.3CVSS5.8AI score0.0033EPSS
SaveExploits0References2
Rows per page
Query Builder