Lucene search
+L

12715 matches found

EUVD
EUVD
•added 2026/10/26 1:08 p.m.•9 views

EUVD-2026-109812

danmuapi before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is used and ADMINTOKEN is unset. Attackers can send POST requests to /api/env/set, /api/env/add, or /api/env/del to set...

9.8CVSS5.9AI score0.02349EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/26 1:08 p.m.•40 views

CVE-2026-116485

The danmu_api software (versions prior to 1.21.7 ) is vulnerable to an authentication bypass that allows unauthenticated attackers to modify server environment configurations. This occurs when the application uses the default TOKEN and the ADMIN_TOKEN is unset. By sending POST requests to endpoin...

9.8CVSS5.9AI score0.02349EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•6 views

PT-2026-123375

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in set ipv6 addr When executing IPv6 address rewrite actions on IPv6 fragments, set ipv6 addr calls update ipv6 checksum. If parse ipv6hdr processes a non-first IPv6 fragment, ...

6.1AI score0.00172EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•7 views

PT-2026-125899

Name of the Vulnerable Software and Affected Versions Qode Membership versions prior to 2.0.6.3 Description An authentication bypass exists that allows for account takeover via the qode membership check facebook user AJAX action. The issue stems from a typographic error in the qode membership log...

9.8CVSS5.8AI score0.00368EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•10 views

PT-2026-123187

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF!set temp type default. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

8.4CVSS6.5AI score0.00127EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•12 views

PT-2026-123335

Name of the Vulnerable Software and Affected Versions danmu api versions prior to 1.21.7 Description An authentication bypass occurs when the default TOKEN is used and the ADMIN TOKEN is unset. This allows unauthenticated attackers to modify server environment configurations by sending POST...

9.8CVSS5.9AI score0.02349EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu
•added 2026/10/26 12:00 a.m.•12 views

UBUNTU-CVE-2026-116156

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of...

4.8CVSS5.2AI score0.00111EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/10/26 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-116156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who...

4.8CVSS5.3AI score0.00111EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•6 views

PT-2026-125383

A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268 B20221104. Affected is the function apmib set of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

9.9CVSS8.5AI score0.0188EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•10 views

PT-2026-123197

A weakness has been identified in Oray Pugongying X5 Pro 7.6.1. This affects the function snmp set of the component SNMP Handler. Executing a manipulation of the argument info.community can lead to crlf injection. It is possible to launch the attack remotely. The exploit has been made available t...

9.9CVSS8.4AI score0.00436EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•8 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•5 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•7 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•7 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•8 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•8 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•6 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•7 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•6 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/25 2:48 p.m.•9 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

4.8CVSS5.4AI score0.00111EPSS
SaveExploits0References2
Rows per page
Query Builder