91522 matches found
CVE-2026-17601: Missing Authorization
A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment...
CVE-2025-71411: Allocation of Resources Without Limits or Throttling
Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...
PT-2026-68845
Name of the Vulnerable Software and Affected Versions StableBit Scanner version 2.6.13.4088 Description A weakness exists in the ScannerService component, specifically within the file C:Program Files x86StableBitScannerServiceScanner.Service.exe. This issue allows for manipulation that leads to...
CVE-2026-45204: NULL Pointer Dereference
Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null pointer dereference occurs in an error path of a function running in kernel thread of execution leading to kernel exceptions,...
CVE-2026-54204: Improper Input Validation
Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “pathnameroot” parameter, which can be set to network locations using UNC paths e.g., “\Server\Share”. The server processes these paths without validation, resulting in outbound connection attempts to attacker-controlled...
Clam AntiVirus Toolkit 1.5.4
Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs ar...
CVE-2026-49005: Use of Password Hash With Insufficient Computational Effort
The root password hash of the device can be obtained through unencrypted information in the firmware...
SimpleHelp 5.5.x < 5.5.16 OIDC Authentication Bypass
The version of SimpleHelp running on the remote web server is 5.5.x prior to 5.5.16 or a 6.0 pre-release prior to 6.0 RC2. It is, therefore, affected by an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication is configured, identity tokens submitted during...
zaproxy w2026-08-06
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
SecureAI-Scan v0.8.0
SecureAI-Scan The AI security scanner that proves its findings. SecureAI-Scan finds LLM, MCP, Agent Skill, and RAG vulnerabilities in TypeScript, JavaScript, and Python — and shows you the evidence: the exact source → flow → sink path for every dataflow finding, resolved through real imports, not...
vigolium v0.3.8
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...
user-scanner v1.4.3.1
User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 380+ total scan vectors —including 155+ email-integrated sites and 225+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames a...
agent-bom v0.99.0
Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. 15 package ecosystems · 16 compliance surfaces · 77 MCP tools · no account required Quick start · Live demo · Docs What it is agent-bom scans repositories, images, and cloud accounts, then correlates what i...
CVE-2026-65571: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...
CVE-2026-32469: Authentication Bypass by Spoofing
Unauthenticated Bypass Vulnerability in CAPTCHA 4WP = 7.6.0 versions...
CVE-2026-65581: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...
CVE-2026-65552: Deserialization of Untrusted Data
Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...
CVE-2026-66425: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder = 1.9.0 versions...
CVE-2026-28169: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier = 2.52.0 versions...