CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

17617 matches found

GithubExploit•added 2026/07/07 11:52 p.m.•113 views

Exploit for Command Injection in Litellm

─── CVE-2026-42271 ─── 🛡️ AMN SECURITY 🛡️ مركز أ...

8.8CVSS7AI score0.9257EPSS

SaveExploits3

PyPA•added 2026/07/07 4:03 p.m.•28 views

xml2rfc is vulnerable to arbitrary file reads through prepped files

ImpactWhen generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the prepped RFCXML. WorkaroundsTest untrusted input with link elements with rel="attachment" before processing. ReferencesThis is related to...

8.7CVSS6.1AI score0.00278EPSS

SaveExploits0References7Affected Software1

Snyk•added 2026/07/07 1:51 p.m.•14 views

Malicious Package

Overview @engagehub/test-claim is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6AI score

SaveExploits0References2

OSSF Malicious Packages•added 2026/07/07 1:51 p.m.•37 views

Malicious code in @engagehub/test-claim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ab727c7412637f0d9a8b0eeb15d022a379de2eee3e10a30ad80b923b07ad553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.9AI score

SaveExploits0References1

Snyk•added 2026/07/07 1:51 p.m.•18 views

Malicious Package

Overview brunomenozzi-test-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6AI score

SaveExploits0References2

OSSF Malicious Packages•added 2026/07/07 1:51 p.m.•36 views

Malicious code in brunomenozzi-test-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e06729f2b798e8015cdd50f9f6f1915a4d3ef45ebd8da4f67d9c8917fbf6188c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.9AI score

SaveExploits0References1

OSSF Malicious Packages•added 2026/07/07 1:10 p.m.•38 views

Malicious code in smtp-test-server-node (npm)