Lucene search
+L

1933418 matches found

Kitploit
Kitploit
added 2026/09/08 3:28 p.m.8 views

CVE-2026-8069

De un Named Pipe de Acer a NT AUTHORITY\SYSTEM: CVE-2026-8069 Acer NitroSense y PredatorSense 3.x instalaron un servicio de Windows llamado PSSvc que exponía un protocolo personalizado de named pipe a usuarios locales. Un comando del protocolo aceptaba una ruta de ejecutable controlada por el...

8.5CVSS0.0012EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2026/09/08 3:27 p.m.6 views

NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

NLTK's package downloader in nltk/downloader.py does not verify file integrity after download and before extraction. The download flow at lines 789-825: 1. File is downloaded to a temp path via HTTP 2. os.replacetmpfilepath, filepath moves it to the final location line 799 3. Extraction begins vi...

5.3CVSS0.001EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2026/09/08 3:27 p.m.6 views

GHSA-5WP5-5229-5G6Q NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

NLTK's package downloader in nltk/downloader.py does not verify file integrity after download and before extraction. The download flow at lines 789-825: 1. File is downloaded to a temp path via HTTP 2. os.replacetmpfilepath, filepath moves it to the final location line 799 3. Extraction begins vi...

5.3CVSS0.00116EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2026/09/08 3:27 p.m.10 views

NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol

Summary There's a logic bug in FileSystemPathPointer.open inside nltk/data.py that makes the sandbox check permanently inert. The guard condition is always False — meaning any file the process can read is accessible by passing a file:// URL to nltk.data.load. --- Details In nltk/data.py,...

7.1CVSS0.00359EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2026/09/08 3:27 p.m.4 views

GHSA-72R2-7MFR-5XR9 NLTK: FileSystemPathPointer.open() sandbox check is dead code — arbitrary file read via file:// protocol

Summary There's a logic bug in FileSystemPathPointer.open inside nltk/data.py that makes the sandbox check permanently inert. The guard condition is always False — meaning any file the process can read is accessible by passing a file:// URL to nltk.data.load. --- Details In nltk/data.py,...

6.5CVSS0.00359EPSS
SaveExploits1References8
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/08 3:26 p.m.6 views

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.12 Vulnerability Details CVEID:CVE-2026-2303 DESCRIPTION: The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS. The C wrapper implementation contains a heap...

9.1CVSS7.6AI score0.00633EPSS
SaveExploits2Affected Software1
OSV
OSV
added 2026/09/08 3:25 p.m.4 views

SUSE-SU-2026:23507-1 Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. Non security issues fixed: - Econf parser adds tags in drop-in files outside any section to main bsc1272534. - Need...

5.8AI score
SaveExploits0References8
GithubExploit
GithubExploit
added 2026/09/08 3:19 p.m.15 views

DataEase-Authenticated-SQL-Injection-

DataEase: Authenticated SQL Injection previewData Summar...

6.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 3:16 p.m.15 views

SkillSpector v2.11.1

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

6.9AI score
SaveExploits0References15
CVE
CVE
added 2026/09/08 3:13 p.m.10 views

CVE-2026-86719

WWBN AVideo through commit c3edcc274c (master) is affected by a cross-site request forgery (CSRF) vulnerability in the CustomizeUser plugin at the endpoint plugin/CustomizeUser/swapUser.json.php. The endpoint reads users_id from $_REQUEST and calls User::swapUser() without CSRF protection, as the...

5.4CVSS0.00108EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/08 3:13 p.m.7 views

CVE-2026-86719 WWBN AVideo CustomizeUser Cross-Site Request Forgery Session Hijacking

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 master contains a cross-site request forgery vulnerability in the CustomizeUser plugin endpoint plugin/CustomizeUser/swapUser.json.php. The endpoint takes usersid from $REQUEST and invokes User::swapUser without calling...

5.4CVSS0.00108EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/08 3:13 p.m.27 views

CVE-2026-86719 WWBN AVideo CustomizeUser Cross-Site Request Forgery Session Hijacking

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 master contains a cross-site request forgery vulnerability in the CustomizeUser plugin endpoint plugin/CustomizeUser/swapUser.json.php. The endpoint takes usersid from $REQUEST and invokes User::swapUser without calling...

5.4CVSS0.00108EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/08 3:13 p.m.6 views

EUVD-2026-72855

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 master contains a cross-site request forgery vulnerability in the CustomizeUser plugin endpoint plugin/CustomizeUser/swapUser.json.php. The endpoint takes usersid from $REQUEST and invokes User::swapUser without calling...

5.4CVSS0.00108EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 3:05 p.m.9 views

memdumper

memdumper memdumper lee la memoria de un proceso de macOS en ejecución bajo el entitlement de depurador de otro binario firmado. La idea es que taskforpid y ptrace se ejecuten como ese binario con entitlement, de modo que un EDR lo registre a él en lugar de a memdumper. por cenobyte...

6AI score
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/08 3:05 p.m.6 views

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 3.5.19 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...

9.8CVSS0.00422EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/08 3:03 p.m.7 views

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)

Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 1.0 have been addressed in version 11.3.1.2-IF2 Vulnerability Details CVEID:CVE-2026-41848 DESCRIPTION: Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to...

9.8CVSS7.9AI score0.00635EPSS
SaveExploits2Affected Software1
RedHat Linux
RedHat Linux
added 2026/09/08 3:01 p.m.10 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.32 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.32 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

8.1CVSS0.00598EPSS
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/08 2:57 p.m.6 views

CVE-2025-49132

CVE-2025-49132 Proof of Concept PoC This repository contains a Proof of Concept PoC for CVE-2025-49132, a critical unauthenticated remote code execution RCE vulnerability in Pterodactyl Panel versions prior to 1.11.11. Vulnerability Details CVE ID : CVE-2025-49132 Severity : 10.0 Critical -...

10CVSS5.9AI score0.54677EPSS
SaveExploits30References2
The Hacker News
The Hacker News
added 2026/09/08 2:54 p.m.7 views

Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC

Whoever took nearly 4,000 bitcoin from the Liquid Network on Sunday, September 6, returned 3,400 of it the next day, Bitcoin's public record shows. About 598.5 bitcoin has not come back. Liquid is a Bitcoin sidechain that holds real bitcoin to back a token called L-BTC. The network is still pause...

5.7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/09/08 2:46 p.m.17 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Proftpd

CVE-2010-4221 — ProFTPD TELNET IAC Stack Overflow: From Patch...

10CVSS0.91303EPSS
SaveExploits13
Rows per page
Query Builder