Lucene search
+L

30292 matches found

Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.27 views

PT-2026-58514

Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description Improper authorization allows an authorized attacker to elevate privileges over a network, enabling them to affect the system. Recommendations At the moment, the...

9CVSS7.2AI score0.01788EPSS
SaveExploits14References23
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.33 views

PT-2026-58657

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition in Windows Management Services allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

7CVSS6AI score0.00264EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.21 views

PT-2026-58342

Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally...

7CVSS6AI score0.00279EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.38 views

PT-2026-58504

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network...

4.8CVSS6AI score0.00395EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.23 views

PT-2026-58350

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

7.5CVSS6.2AI score0.01174EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.14 views

PT-2026-58908

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, the Fluentd out http output plugin allows placeholders such as $tag in the endpoint configuration parameter, and if a placeholder value is derived from untruste...

7.2CVSS7.1AI score0.00442EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.31 views

PT-2026-58861

Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level privileges to cause a Denial of Service DoS via removing the license from the webserver...

6.1AI score0.00516EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/14 12:00 a.m.12 views

CVE-2026-36035

Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level privileges to cause a Denial of Service DoS via removing the license from the webserver...

6.1AI score0.00516EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.26 views

PT-2026-58259

Name of the Vulnerable Software and Affected Versions Microsoft Active Directory Federation Services affected versions not specified Description An access control weakness exists in the service and admin surfaces of Microsoft Active Directory Federation Services AD FS due to insufficient...

7.8CVSS7.6AI score0.00346EPSS
SaveExploits0References59
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.27 views

PT-2026-58390

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow exists in Active Directory Federation Services AD FS, which allows an unauthenticated attacker to remotely trigger a denial of servi...

7.8CVSS6.3AI score0.01174EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.29 views

PT-2026-58127

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Windows Schannel affected versions not specified Description A memory leak occurs in Windows Cryptographic Services when memory is not released after its effective lifetime. This...

7.5CVSS6.1AI score0.01174EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.21 views

PT-2026-58316

Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

5.9CVSS6.1AI score0.00855EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.34 views

PT-2026-58139

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. A heap-based buffer overflow occurs when a program...

9.8CVSS6.3AI score0.00792EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
added 2026/07/13 9:04 p.m.14 views

CVE-2026-62240 CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools

CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validateurl function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying URLs that redirect to internal...

8.3CVSS6.1AI score0.0052EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/07/13 9:04 p.m.57 views

CVE-2026-62240 CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools

CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validateurl function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying URLs that redirect to internal...

8.3CVSS0.0052EPSS
SaveExploits1References5
NVD
NVD
added 2026/07/13 7:17 p.m.33 views

CVE-2026-49969

Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue arbitrary HTTP requests from the server by supplying unvalidated caller-controlled URLs to endpoints backed by MediaUploader::fromSource. Attackers can craft URLs targeting...

7.4CVSS0.00418EPSS
SaveExploits0References3
PyPA
PyPA
added 2026/07/13 3:46 p.m.26 views

Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal

SummaryThe terminal-server reverse proxy in backend/openwebui/routers/terminals.py does not fully confine the user-controlled path segment before forwarding it to an admin-configured terminal server. An authenticated user who has been granted access to a terminal server can craft path values...

7.7CVSS6.2AI score0.00522EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:35 p.m.30 views

PraisonAI spider_tools SSRF protection bypass via alternate loopback host encodings

SummaryPraisonAI's spidertools URL validation can be bypassed using alternate loopback host encodings.The affected component is:textpraisonaiagents/tools/spidertools.pyThe tool contains a URL validation function intended to block local or unsafe targets before fetching attacker-controlled URLs...

5.5CVSS6.3AI score0.00175EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/07/13 3:19 p.m.14 views

PYSEC-2026-2698 Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed

Summary The /api/v1/utils/code/execute endpoint executes arbitrary Python code via Jupyter for any verified user, even when the admin has set ENABLECODEEXECUTION=false. The feature gate is not enforced on the API endpoint — the configuration says "disabled" but code still executes. Details The...

8.8CVSS6.6AI score0.00406EPSS
SaveExploits2References7
PyPA
PyPA
added 2026/07/13 3:19 p.m.22 views

Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed

SummaryThe /api/v1/utils/code/execute endpoint executes arbitrary Python code via Jupyter for any verified user, even when the admin has set ENABLECODEEXECUTION=false. The feature gate is not enforced on the API endpoint — the configuration says "disabled" but code still executes. DetailsThe admi...

8.8CVSS7.5AI score0.00406EPSS
SaveExploits2References7Affected Software1
Rows per page
Query Builder