Lucene search
+L

554696 matches found

Tenable Nessus
Tenable Nessus
added 4 days ago7 views

Zoom Workplace VDI Client < 7.0.11 Vulnerability (ZSB-26016)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 7.0.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-26016 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting...

6.5CVSS5.8AI score0.00276EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 4 days ago2 views

PT-2026-70060

Name of the Vulnerable Software and Affected Versions Realtek BEE Bluetooth HCI driver affected versions not specified Description The bt hci bee send function in drivers/bluetooth/hci/hci bee.c violates the buffer-ownership contract of the bt hci driver api. The driver incorrectly releases the...

5.9CVSS5.5AI score0.0017EPSS
SaveExploits0References5
VulnCheck KEV
VulnCheck KEV
added 4 days ago7 views

VulnCheck KEV: CVE-2026-33497

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

8.7CVSS5.2AI score0.19584EPSS
SaveIn wildExploits1References2
BDU FSTEC
BDU FSTEC
added 4 days ago2 views

The vulnerability of the formCertListInfo() function in the /goform/CertListInfo file of the Tenda CH22 router microprogramming system, which allows a hacker to execute arbitrary commands.

The vulnerability of the formCertListInfo function in the /goform/CertListInfo file of the Tenda CH22 router microsystem is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

9CVSS8.4AI score0.02216EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 4 days ago5 views

The vulnerability of the sctp_process_asconf_param() function in the net/sctp/sm_make_chunk.c module of Linux kernel allows a hacker to elevate their privileges to the root level.

The vulnerability of the sctpprocessasconfparam function in the net/sctp/smmakechunk.c module of the Linux kernel is related to the pointer being dereferenced after its expiration time. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the root level...

10CVSS4.9AI score0.00476EPSS
SaveExploits1References10Affected Software3
Positive Technologies
Positive Technologies
added 4 days ago2 views

PT-2026-70437

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

7.8CVSS5.4AI score0.00278EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 4 days ago3 views

PT-2026-70930

libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend USE SSH=libssh2 contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell metacharacters such as...

9.6CVSS5.9AI score0.00859EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 4 days ago9 views

Linux Distros Unpatched Vulnerability : CVE-2026-68416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: fix double free and WARNON in addmtddevice error paths When deviceregister or mtdnvmemadd fails inside addmtddevice for a partition, the error handling...

5.6AI score0.00156EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 4 days ago44 views

Zoom Workplace VDI Client < 7.0.11 Vulnerability (ZSB-26017)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 7.0.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-26017 advisory. - Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code...

8.3CVSS6.2AI score0.00388EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 4 days ago14 views

📄 SonicWall SMA1000 Server-Side Request Forgery / Remote Command Execution

This Metasploit module exploits a server-side request forgery vulnerability in the SonicWall SMA1000 WorkPlace wsproxy service to access the internal Erlang distribution service. After authenticating using the known Erlang distribution cookie, the module invokes os:cmd/1 through Erlang RPC to...

10CVSS9.2AI score0.74218EPSS
SaveExploits6
Kaspersky
Kaspersky
added 4 days ago10 views

KLA91214 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service, read local files. Below is a complete...

6.7AI score
SaveExploits0References265
Positive Technologies
Positive Technologies
added 4 days ago3 views

PT-2026-70148

Name of the Vulnerable Software and Affected Versions Intelliants Subrion CMS versions prior to 4.2.2 Description An authenticated administrator can delete arbitrary files on the server through the admin panel file deletion endpoint. This occurs because the endpoint passes a user-supplied file pa...

6.5CVSS5.4AI score0.00325EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 4 days ago2 views

The vulnerability of the validate_network_url() function in the nltk.pathsec component of the NLTK library for symbolic and statistical processing of natural language allows a attacker to perform an SSRF attack.

The vulnerability of the validatenetworkurl function in the nltk.pathsec component of the NLTK library, a software library for symbolic and statistical processing of natural language, is related to insufficient validation of requests on the server side. Exploiting this vulnerability may allow a...

3.7CVSS4.9AI score0.00259EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 4 days ago3 views

The vulnerability of the `strip_unsafe_prefix()` function in the UNIX utility commands of the BusyBox, which allows a hacker to cause a service failure

The vulnerability of the stripunsafeprefix function in the UNIX command-line utility set of BusyBox is related to external control via a filename or file path. Exploiting this vulnerability could allow an attacker to cause a service failure...

7CVSS7AI score0.00682EPSS
SaveExploits2References6Affected Software4
BDU FSTEC
BDU FSTEC
added 4 days ago4 views

The vulnerability of the Lib/html/parser.py component of the Python programming language allows a hacker to gain access to confidential data and also trigger a service failure.

The vulnerability of the Lib/html/parser.py component of the Python interpreter is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures through the creation of...

8.5CVSS7.6AI score0.00566EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 4 days ago2 views

The vulnerability of the _4_Setup() function in the install/index.php script of the DedeCMS content management system allows a hacker to execute arbitrary code.

The vulnerability of the 4Setup function in the DedeCMS content management system’s install/index.php script is related to improper external manipulation of file names or file paths. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

5CVSS5.9AI score0.00241EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 4 days ago1 views

PT-2026-70084

Name of the Vulnerable Software and Affected Versions openvt affected versions not specified Description The openvt -u functionality is designed to identify the owner of the current Virtual Terminal VT and execute login as that user from a privileged context. A flaw exists in the authenticate use...

7.8CVSS5.3AI score0.00106EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 4 days ago4 views

Security Updates for Microsoft SharePoint Server 2019 (August 2026)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. CVE-2026-62827 -...

8.8CVSS6AI score0.01908EPSS
SaveExploits0References28
Positive Technologies
Positive Technologies
added 4 days ago1 views

PT-2026-70124

An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to map any email address or username to its internal user objectId via the getUserId Parse cloud function. The function performs no authentication before resolving and returning...

5.3CVSS5.4AI score0.00355EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 4 days ago1 views

PT-2026-70118

An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact Parse cloud function. The function executes with useMasterKey and performs no authentication or authorization checks...

7.5CVSS5.5AI score0.00451EPSS
SaveExploits0References2
Rows per page
Query Builder