Lucene search
+L

587334 matches found

CVE
CVE
added 6 hours ago12 views

CVE-2026-15918

The CVE describes a SQL injection in the VikAppointments WordPress plugin (versions

7.5CVSS5.8AI score
SaveExploits0References5
EUVD
EUVD
added 6 hours ago4 views

EUVD-2026-53038

VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the public reviews list is sorted is taken from the incoming request and used to build a database query without proper validation or sanitization...

7.5CVSS5.8AI score
SaveExploits0References5
EUVD
EUVD
added 6 hours ago3 views

EUVD-2026-53039

The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12.0. This is due to a permission map collision in the havePermissions function in classes/frame.php, where arraymerge overwrites the popup module's...

8.8CVSS5.5AI score
SaveExploits0References7
CVE
CVE
added 6 hours ago7 views

CVE-2026-16143

Vulnerability: CVE-2026-16143 affects VikRentItems Flexible Rental Management System

7.2CVSS5.7AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 6 hours ago2 views

CVE-2026-8761

The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This is due to a missing authorization check in the CustomersController REST controller includes/REST/CustomersController.php, which re-registers WooCommerce's customer CRUD routes...

8.8CVSS5.3AI score
SaveExploits0References11Affected Software1
CVE
CVE
added 6 hours ago13 views

CVE-2026-8761

CVE-2026-8761: Dokan WordPress plugin vulnerability in all versions up to 5.0.1 (disputed in title by 5.0.2) where a missing authorization check in the REST CustomersController re-registers WooCommerce’s customer routes under /wp-json/dokan/v1/customers/, replacing manage_woocommerce with a vendo...

8.8CVSS5.3AI score
SaveExploits0References10
EUVD
EUVD
added 6 hours ago3 views

EUVD-2026-53037

The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This is due to a missing authorization check in the CustomersController REST controller includes/REST/CustomersController.php, which re-registers WooCommerce's customer CRUD routes...

8.8CVSS5.3AI score
SaveExploits0References10
EUVD
EUVD
added 8 hours ago6 views

EUVD-2026-53022

A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit i...

9CVSS8.4AI score
SaveExploits0References5
EUVD
EUVD
added 9 hours ago4 views

EUVD-2026-53020

A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to launch the attack remotely. The exploit...

6.5CVSS6.5AI score
SaveExploits0References5
EUVD
EUVD
added 10 hours ago5 views

EUVD-2026-53009

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

5.3CVSS5.4AI score
SaveExploits0References6
NVD
NVD
added 10 hours ago6 views

CVE-2026-18853

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

5.3CVSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 10 hours ago3 views

Malicious code in sextant-cli-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2c5b4e1a7b46248be73f0ae010359845d3f51ea19241e17625021d91c2ec9c The npm package ships a Go binary sxt that on execution registers with the hardcoded C2 host relay.sextant.top, establishes WebRTC pion DataChannels...

5.8AI score
SaveExploits0References23
OSSF Malicious Packages
OSSF Malicious Packages
added 10 hours ago8 views

Malicious code in sextant-cli-darwin-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23978b08a7e3f8af97d2c8060e7fc3aca9a18d9f3435163a9d3ab97ac0b9d4d0 Package ships a darwin/arm64 Go binary that opens an outbound WebSocket to a hardcoded author-controlled relay at wss://relay.sextant.top and links a...

6.2AI score
SaveExploits0References30
Microsoft Secure
Microsoft Secure
added yesterday11 views

ChainDrop supply chain compromise: Anatomy of a self-propagating worm

In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. Indicators of compromise IOC 4. Microsoft Defender XDR detections 5. Advanced hunting queries 6. Learn more Microsoft Threat Intelligence identified a large-scale npm supply chain attack affecting more than 400...

6.1AI score
SaveExploits0
Cvelist
Cvelist
added yesterday9 views

CVE-2026-18853 ZomboDroid Meme Generator App com.zombodroid.MemeGenerator t5.l.c path traversal

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the function t5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been...

5.3CVSS
SaveExploits0References5
CVE
CVE
added yesterday7 views

CVE-2026-18853

CVE-2026-18853 affects ZomboDroid Meme Generator App for Android (version 4.6830) through the function t5.l.c of component com.zombodroid.MemeGenerator, enabling path traversal. Local access is required. The exploit has been publicly disclosed, and the vendor has not responded to the disclosure. ...

5.3CVSS5AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added yesterday22 views

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

7.5CVSS6AI score0.06835EPSS
SaveExploits8References3Affected Software1
BDU FSTEC
BDU FSTEC
added yesterday30 views

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

5CVSS5.8AI score
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-45103

A flaw was found in OpenSIPS, a Session Initiation Protocol SIP server. An integer overflow vulnerability exists in the TCP message framing layer when parsing the Content-Length header. An unauthenticated, network-based attacker can exploit this by sending a crafted Content-Length value, causing...

7.5CVSS5.6AI score0.00053EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-18103

A flaw was found in dhcp-server. A remote attacker with network access to the OMAPI Open Management Application Programming Interface port, especially if not secured with TSIG Transaction Signature key authentication, could send a specially crafted lease creation request. This request, containing...

4.9CVSS5.8AI score
SaveExploits0References3
Rows per page
Query Builder