Lucene search
+L

18296 matches found

vulnersOsv
vulnersOsv
added 2026/06/01 10:29 a.m.10 views

com.infobip.kafkistry:kafkistry-app (>=0.7.0 <=0.10.1), com.infobip.kafkistry:kafkistry-auditing (>=0.7.0 <=0.10.1) +19 more potentially affected by CVE-2026-48827 via org.apache.sshd:sshd-git (>=2.10.0 <=2.17.1)

org.apache.sshd:sshd-git MAVEN version =2.10.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.9.9, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.62.0, =2.25.0, =1.1.0, =1.1.1 and more Source cves: CVE-2026-48827 Source advisory: SNYK:JAVA-ORGAPACHESSHD-17151844...

7.1CVSS5.7AI score0.00527EPSS
SaveExploits0
OSV
OSV
added 2026/06/01 12:0 a.m.15 views

ASB-A-452042097

In performPreInstallChecks of InstallRepository.kt, there is a possible way to bypass MDM policy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00083EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.35 views

PT-2026-46879

Name of the Vulnerable Software and Affected Versions kas versions prior to 5.3 Description The software processes repository configuration includes before validating the signatures of those repositories. Under specific conditions, an attacker who has gained control of a referenced repository can...

2.1CVSS6.1AI score0.00021EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.34 views

PT-2026-45483

Name of the Vulnerable Software and Affected Versions kas versions prior to 5.3 Description Users relying exclusively on a git commit ID SHA-1 or SHA-256 to verify if a repository checkout matches a validated state in a kas configuration may be deceived into checking out a branch with the same...

2.1CVSS6.1AI score0.00018EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.28 views

PT-2026-45467

Name of the Vulnerable Software and Affected Versions CloudPirates Open Source Helm Charts versions prior to commit fcf9302 Description A GitHub Actions workflow in the pull-request.yaml file executes attacker-controlled code from fork pull requests within a privileged context. This allows for th...

10CVSS5.5AI score0.00275EPSS
SaveExploits0References9
GithubExploit
GithubExploit
added 2026/05/30 5:59 a.m.156 views

HTB-Machines-writeups

somdv3 — HTB Writeups Personal HackTheBox writeup repository...

5.8AI score
SaveExploits0
Snyk
Snyk
added 2026/05/29 10:54 p.m.12 views

Malicious Package

Overview @cloudplatform-single-spa/dataplatform-trino is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/29 10:9 p.m.13 views

Malicious Package

Overview hardhat-evmchain is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/29 7:43 p.m.11 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the parsing of maliciously crafted Git repository data, such as .pack, .idx, or loose objects. An attacker can cause the application to panic by providing a payload that excee...

6.9CVSS5.8AI score
SaveExploits0References2
NVD
NVD
added 2026/05/29 7:16 p.m.66 views

CVE-2026-49375

In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page...

6.1CVSS0.00223EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/29 6:17 p.m.22 views

CVE-2026-45628

Dokploy is a free, self-hostable Platform as a Service PaaS. In 0.29.2 and earlier, Dokploy constructs shell commands using JavaScript template literals and executes them via childprocess.exec which runs through /bin/sh -c. User-supplied branch names, repository URLs, and Docker credentials are...

9.6CVSS0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/29 6:15 p.m.43 views

CVE-2026-49375

In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page...

6.1CVSS0.00223EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/29 6:15 p.m.31 views

CVE-2026-49375

CVE-2026-49375 relates to JetBrains TeamCity prior to 2026.1, with a reflected XSS on the repository download page in version 2025.11.5. The CVE has a CVSS 3.1 base score of 6.1 (MEDIUM) with a network attack vector, requiring user interaction and no privileges, and results in low confidentiality...

6.1CVSS5.8AI score0.00223EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/05/29 6:15 p.m.15 views

EUVD-2026-33383

In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page...

6.1CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/29 6:15 p.m.11 views

CVE-2026-49375

In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page...

6.1CVSS5.8AI score0.00223EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/29 6:15 p.m.10 views

CVE-2026-49375

In JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository download page...

6.1CVSS5.8AI score0.00223EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/29 4:33 p.m.14 views

CVE-2026-45628 Dokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline

Dokploy is a free, self-hostable Platform as a Service PaaS. In 0.29.2 and earlier, Dokploy constructs shell commands using JavaScript template literals and executes them via childprocess.exec which runs through /bin/sh -c. User-supplied branch names, repository URLs, and Docker credentials are...

9.6CVSS5.8AI score0.0023EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/29 4:33 p.m.44 views

CVE-2026-45628

Dokploy (PaaS) vulnerability CVE-2026-45628 affects version 0.29.2 and earlier. The root cause is unescaped interpolation of user-supplied branch names, repo URLs, and Docker credentials into shell commands constructed with JavaScript template literals and executed via child_process.exec (shell /...

9.6CVSS5.8AI score0.0023EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/29 4:33 p.m.7 views

CVE-2026-45628 Dokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline

Dokploy is a free, self-hostable Platform as a Service PaaS. In 0.29.2 and earlier, Dokploy constructs shell commands using JavaScript template literals and executes them via childprocess.exec which runs through /bin/sh -c. User-supplied branch names, repository URLs, and Docker credentials are...

9.6CVSS5.9AI score
SaveExploits0References3
OSV
OSV
added 2026/05/29 4:16 p.m.15 views

DEBIAN-CVE-2026-48501

GitHub CLI gh is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly includes authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands. The CLI uses a shared HTTP client with an authenticati...

9.1CVSS5.8AI score0.00289EPSS
SaveExploits0References1
Rows per page
Query Builder