Lucene search
+L

59700 matches found

NVD
NVD
added 2026/07/16 10:17 p.m.14 views

CVE-2026-44177

Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, Kirby did not correctly validate the provided user ID, resulting in a path traversal vulnerability. Version 5.3.0 introduced a performance improvement to the Users collection that loaded user object...

8.8CVSS0.00454EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/16 10:17 p.m.11 views

CVE-2026-44175

Kirby is an open-source content management system. In versions prior to 4.9.1 and 5.4.1, Kirby did not securely sanitize the contents of the list field on save, leaving it vulnerable to cross-site scripting XSS. Kirby's list field stores its formatted content as HTML, and unlike other field types...

8.5CVSS0.00254EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 9:19 p.m.63 views

CVE-2026-44177

CVE-2026-44177 affects Kirby CMS (Kirby 5.3.0 up to

8.8CVSS6AI score0.00454EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 9:13 p.m.47 views

CVE-2026-44174

Kirby CMS (versions prior to 4.9.1 and 5.4.1) exposes REST API search and collection queries that did not validate model attributes, allowing authenticated users to invoke arbitrary model methods (e.g., password(), root(), loginPasswordless(), delete()) via collection endpoints. This can disclose...

8.7CVSS6.2AI score0.0028EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/16 9:13 p.m.8 views

CVE-2026-44174 Kirby: Arbitrary Method Call via REST API search and collection query endpoints

Kirby is an open-source content management system. Prior to 4.9.1 and 5.4.1, Kirby did not validate the model attributes that were used in its collection queries, allowing attackers to include arbitrary model methods in their queries. This includes methods with sensitive data such as password...

8.7CVSS5.5AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/16 7:47 p.m.36 views

CVE-2026-44981 CrowdSec LAPI: Denial of Service via Unbounded Gzip Decompression

CrowdSec offers crowdsourced protection against malicious IPs. From 1.7.0 until 1.7.8, the LAPI router used gin-contrib/gzip with DefaultDecompressHandle globally in pkg/apiserver/controllers/controller.go, causing /v1/watchers and /v1/watchers/login to decompress unauthenticated gzip-compressed...

8.2CVSS0.00292EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/16 7:37 p.m.12 views

EUVD-2026-45017

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace...

7.3CVSS6.1AI score0.00104EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2026/07/16 7:19 p.m.16 views

Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

Vulnerability report without repro case. Repro case may be added later after harness is complete. Preconditions 4: - Tenant has SecurityPolicy + TCPRoute RBAC baseline - Tenant namespace permitted to attach TCPRoute to a Gateway listener - spec.authorization omitted the trigger - No admission...

6.1AI score0.00121EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2026/07/16 7:16 p.m.13 views

CVE-2026-46513

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by Tools/CreateApiToken.php:33-36 as raw bin2hexrandombytes32 strings in ocapitokens, and Frogman.class.php:78 authenticated the X-Frogman-Token header by comparing it with the stor...

7.4CVSS0.00261EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/16 7:12 p.m.6 views

GHSA-V95X-XHQ5-4929 kumactl connects to control plane without verifying TLS certificate when no CA is configured

When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, kumactl disables TLS verification and sends API tokens over the unverified connection Impact An attacker on the network path between the operator and the control plane can intercept user or admin A...

5.5CVSS6.1AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/16 7:12 p.m.11 views

kumactl connects to control plane without verifying TLS certificate when no CA is configured

When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, kumactl disables TLS verification and sends API tokens over the unverified connection Impact An attacker on the network path between the operator and the control plane can intercept user or admin A...

6.1AI score
SaveExploits0References4Affected Software2
OSV
OSV
added 2026/07/16 6:47 p.m.10 views

MAL-2026-10729 Malicious code in channel-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb42c8663e71b69abd887afe5b53f3c9d57bb405dd9e8ec4954eb1bf9bb0c033 The package's runtime code implements a remote command-and-control agent rather than a normal library. bin/cli.js hardcodes the endpoint...

6.2AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/16 6:42 p.m.29 views

Malicious code in captcha-solve-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99621af0900df34246c87811ea5c2a643f2b3805601136dcc0a6768e48af925f The PyPI package captcha-solve-api contains no captcha functionality and is instead a binary dropper disguised as an analytics SDK. A custom setuptoo...

6.7AI score
SaveExploits0References9
OSV
OSV
added 2026/07/16 6:42 p.m.9 views

MAL-2026-10755 Malicious code in captcha-solve-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99621af0900df34246c87811ea5c2a643f2b3805601136dcc0a6768e48af925f The PyPI package captcha-solve-api contains no captcha functionality and is instead a binary dropper disguised as an analytics SDK. A custom setuptoo...

6.7AI score
SaveExploits0References9
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/16 6:41 p.m.27 views

Malicious code in hehehe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588dd776720f805d7d84a58c93ffcd21ed860e3fc21a48787d732eb6180b974d Package is published as an 'enterprise Windows Diagnostic Utility' but is an anti-proctoring cheating tool that also steals the installer's browser...

6.1AI score
SaveExploits0References3
NVD
NVD
added 2026/07/16 6:16 p.m.13 views

CVE-2026-15945

A flaw was found in the group search functionality of the Keycloak server's administrative API. When Fine-Grained Admin Permissions FGAP v2 is enabled, a delegated administrator can bypass access restrictions to view parent groups they are not authorized to see. By searching for a child group the...

4.3CVSS0.00193EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/16 6:14 p.m.13 views

CVE-2026-46513 Frogman: API tokens stored in plaintext

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by Tools/CreateApiToken.php:33-36 as raw bin2hexrandombytes32 strings in ocapitokens, and Frogman.class.php:78 authenticated the X-Frogman-Token header by comparing it with the stor...

7.4CVSS6.1AI score
SaveExploits0References6
CVE
CVE
added 2026/07/16 6:6 p.m.18 views

CVE-2026-46353

BigBlueButton vulnerability CVE-2026-46353 affects the bbb-web component. Before version 3.0.21, checksum validation could be bypassed when a presentationUploadExternalUrl parameter was supplied to API request handling in CreateMeeting.java and ValidationService.java, allowing a user to send vali...

8.1CVSS6.1AI score0.00266EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/07/16 5:49 p.m.81 views

Exploit for Path Traversal in Gogs

Gogs Arbitrary File Write to RCE CVE-2025-8110 - Exploit de...

8.8CVSS7.1AI score0.82482EPSS
SaveExploits21
NVD
NVD
added 2026/07/16 5:16 p.m.29 views

CVE-2026-63087

Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stackid and orgid values present in the public source tree...

9.8CVSS0.00427EPSS
SaveExploits0References2
Rows per page
Query Builder