Lucene search
+L

37434 matches found

Kitploit
Kitploit
•added 2026/08/21 9:06 p.m.•14 views

OnionHop v3.8.1

OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...

5.7AI score
SaveExploits0References6
Mend
Mend
•added 2026/08/21 11:05 a.m.•9 views

CVE-2026-77767

Reconmap's API applies a fallback authorization policy in apps/api/app/Program.cs that requires an authenticated user holding the administrator role, so controllers without their own attribute reject anonymous callers. The report preview action in apps/api/app/Controllers/ReportsController.cs...

8.7CVSS6AI score0.00457EPSS
SaveExploits0References8
NVD
NVD
•added 2026/08/21 8:16 a.m.•18 views

CVE-2026-73537

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component WebView running on the affected product, resulting in the displayed content being altered...

5.1CVSS0.00289EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/21 7:23 a.m.•47 views

CVE-2026-73537

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component WebView running on the affected product, resulting in the displayed content being altered...

5.1CVSS0.00289EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/21 7:23 a.m.•19 views

EUVD-2026-63826

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component WebView running on the affected product, resulting in the displayed content being altered...

5.1CVSS5.3AI score0.00289EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/21 7:23 a.m.•20 views

CVE-2026-73537

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component WebView running on the affected product, resulting in the displayed content being altered...

5.1CVSS5.7AI score0.00289EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/21 7:23 a.m.•42 views

CVE-2026-73537

CVE-2026-73537 is a cross-site scripting (CWE-79) vulnerability in the Miraikan Assist App provided by the Japan Science and Technology Agency (JST) . The flaw allows an arbitrary script to be executed in the app's WebView browser component, potentially altering displayed content. The vulnerabili...

5.1CVSS5.7AI score0.00289EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/08/21 6:39 a.m.•24 views

Miraikan Assist App vulnerable to cross-site scripting

Overview Miraikan Assist App provided by Japan Science and Technology Agency JST contains the following vulnerability. Cross-site scripting CWE-79 - CVE-2026-73537 RyotaK of GMO Flatt Security Inc. reported this vulnerability to the developer and coordinated. After the coordination was completed,...

5.1CVSS5.9AI score0.00289EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/08/21 3:30 a.m.•14 views

Signal-iOS v8.25.0.1809

Signal iOS Signal is a free and open source messaging app for simple private communication with friends. Also available on Android and Desktop. Questions? For troubleshooting and questions, please visit our support center or unofficial community forum. Contributing Bug Reports The best way to...

5.7AI score
SaveExploits0References5
NVD
NVD
•added 2026/08/21 1:16 a.m.•23 views

CVE-2026-20679

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination...

4.3CVSS0.00357EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/08/21 1:05 a.m.•13 views

SUSE CVE-2026-43804

This issue was addressed through improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. Visiting a website may lead to an app denial-of-service...

6.5CVSS5.9AI score0.00433EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/21 12:38 a.m.•13 views

CVE-2026-20679

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination...

5.8AI score0.00357EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/21 12:38 a.m.•58 views

CVE-2026-20679

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination...

0.00357EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/21 12:38 a.m.•61 views

CVE-2026-20679

The CoreUI component in macOS is vulnerable to a flaw where processing a maliciously crafted file can lead to unexpected app termination . This issue was addressed by Apple with improved checks . The vulnerability is fixed in macOS Sequoia 15.7.5 , macOS Sonoma 14.8.5 , and macOS Tahoe 26.4 . Exp...

4.3CVSS5.8AI score0.00357EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/21 12:00 a.m.•6 views

CVE-2026-20679: Out-of-bounds Read

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination...

4.3CVSS5.8AI score0.00357EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/21 12:00 a.m.•27 views

PT-2026-79311

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component WebView running on the affected product, resulting in the displayed content being altered...

5.1CVSS4.8AI score0.00289EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/21 12:00 a.m.•5 views

CVE-2026-73537: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component WebView running on the affected product, resulting in the displayed content being altered...

5.1CVSS5.6AI score0.00289EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/21 12:00 a.m.•40 views

PT-2026-79483

CrossWatch CW is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without authentication and returns the other sessions array, which exposes metadata of all active sessions — including originating IP addresses, User-Agent strings, internal session IDs, and...

5.3CVSS5.8AI score0.00396EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/21 12:00 a.m.•38 views

PT-2026-79271

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination...

5.3AI score0.00357EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/21 12:00 a.m.•8 views

CVE-2026-53497: Exposure of Sensitive Information to an Unauthorized Actor

CrossWatch CW is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without authentication and returns the othersessions array, which exposes metadata of all active sessions — including originating IP addresses, User-Agent strings, internal session IDs, and...

5.3CVSS5.9AI score0.00396EPSS
SaveExploits0References3
Rows per page
Query Builder