Lucene search
+L

122073 matches found

osv_mini
osv_mini
•added 2026/08/17 1:40 p.m.•15 views

MINI-GHQ8-5WVC-3M59

Bulletin has no description...

7.5CVSS6AI score0.00568EPSS
SaveExploits0
osv_mini
osv_mini
•added 2026/08/17 1:40 p.m.•17 views

MINI-XG72-FH8P-6H98

Bulletin has no description...

6.1CVSS6AI score0.0031EPSS
SaveExploits0
osv_mini
osv_mini
•added 2026/08/17 1:39 p.m.•17 views

MINI-53WM-6QG2-GXQP

Bulletin has no description...

6.1CVSS6AI score0.0031EPSS
SaveExploits0
Circl
Circl
•added 2026/08/17 12:50 p.m.•18 views

CVE-2026-72442

creationtimestamp| type| source ---|---|--- 2026-08-17 12:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbqi2vn242e 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

9.8CVSS8.4AI score0.00553EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/17 11:04 a.m.•12 views

CVE-2026-74893 openssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded Secrets

opensslencrypt versions before 1.4.0 contain hardcoded default JWT signing secrets in config.py that pass validation checks. Attackers with access to source code can forge valid JWT tokens for any clientid to gain authenticated access to keyserver and telemetry APIs...

8.8CVSS5.8AI score0.00447EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/17 11:04 a.m.•21 views

EUVD-2026-60112

opensslencrypt versions before 1.4.0 contain hardcoded default JWT signing secrets in config.py that pass validation checks. Attackers with access to source code can forge valid JWT tokens for any clientid to gain authenticated access to keyserver and telemetry APIs...

8.8CVSS5.8AI score0.00447EPSS
SaveExploits0References2
Circl
Circl
•added 2026/08/17 9:00 a.m.•24 views

CVE-2026-72209

creationtimestamp| type| source ---|---|--- 2026-08-17 09:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbdmrn5gw2m...

9.8CVSS8.5AI score0.00553EPSS
SaveExploits0References1
osv_bit
osv_bit
•added 2026/08/17 6:08 a.m.•18 views

BIT-GITLAB-2026-6336 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthorized user to view project import source information due to a missing authorization check...

5.3CVSS5.6AI score0.00457EPSS
SaveExploits0References4
Circl
Circl
•added 2026/08/17 5:51 a.m.•22 views

CVE-2026-74579

creationtimestamp| type| source ---|---|--- 2026-08-17 05:51:55+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117109287499134629 2026-08-17 07:03:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hbzn53lqt7uxy...

7.1CVSS5.8AI score0.0012EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/17 3:16 a.m.•20 views

CVE-2026-50601

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain...

8.7CVSS0.00406EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/08/17 2:43 a.m.•18 views

hate_crack v2.28.1

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

6AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2026/08/17 2:02 a.m.•44 views

CVE-2026-50601

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain...

8.7CVSS5.5AI score0.00406EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/08/17 2:02 a.m.•21 views

EUVD-2026-60025

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain...

8.7CVSS5.5AI score0.00406EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/08/17 12:14 a.m.•22 views

PacketSender v8.11.1

Introduction https://packetsender.com Read this in other languages:English, Español, Deutsch, Français, italiano 简体中文. Packet Sender is an open source utility to allow sending and receiving TCP, UDP, and SSL encrypted TCP packets as well as HTTP/HTTPS requests and panel generation. The mainline...

6.2AI score
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•29 views

PT-2026-73192

A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories. An attacker could exploit this access to extract embedded administrative keys and secrets, potentially allowing them to gain...

8.7CVSS5.5AI score0.00406EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•10 views

CVE-2026-74253: Improper Control of Generation of Code

Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes source blocks found in Joomla’s final rendered HTML without reliably determining where that code originated...

10CVSS5.7AI score0.00323EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/17 12:00 a.m.•16 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100760 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Reco...

5.5CVSS5.5AI score0.00129EPSS
SaveExploits0References4
Circl
Circl
•added 2026/08/16 8:44 a.m.•24 views

CVE-2026-13424

creationtimestamp| type| source ---|---|--- 2026-08-16 08:44:15+00:00| seen| https://bsky.app/profile/suriq.io/post/3mt6sbibgd22p 2026-08-16 09:35:26+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mt6v52kmjl2r 2026-08-16 13:16:12+00:00| seen|...

7.2CVSS5.8AI score0.0058EPSS
SaveExploits0References4
CVE
CVE
•added 2026/08/16 6:00 a.m.•53 views

CVE-2026-19726

The Visualizer WordPress plugin before version 4.0.7 contains an incorrect authorization vulnerability. It fails to properly restrict access to chart configurations, enabling users with the Contributor role and above to view the full configuration of any chart on the site. This includes configura...

6.5CVSS6AI score0.0034EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/16 6:00 a.m.•42 views

CVE-2026-19726

The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, allowing users with the Contributor role and above to read the full configuration of any chart on the site, including charts the Visualizer WordPress plugin before 4.0.7's own...

5.5AI score0.0034EPSS
SaveExploits0References1
Rows per page
Query Builder