Lucene search
+L

195511 matches found

GithubExploit
GithubExploit
added 2026/08/01 10:56 a.m.76 views

Exploit for Uncontrolled Resource Consumption in Siemens Simatic_S7-1500_Cpu_1518F-4_Pn\/Dp_Mfp_Firmware

CVE-2023-44487-HTTP2-DoS-Rapid-Reset-Exploit Advanced CVE-2023...

7.5CVSS7.2AI score0.99999EPSS
SaveExploits21
OSV
OSV
added 2026/08/01 10:35 a.m.5 views

CVE-2026-18536 Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP

Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. The Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo remote sources are accessed over plain HTTP. The Data::Entropy::RawSource::RandomOrg integrity check trivially matches...

7.5CVSS5.6AI score
SaveExploits0References9
Wired Threat Level
Wired Threat Level
added 2026/08/01 10:30 a.m.10 views

7 States’ Water Systems Hit by Cyberattacks Likely Tied to Iran

Plus: The FBI eyes AI-powered tech to detect future crimes, Russia charges Telegram’s founder, xAI sues to stop a state’s “nudification” ban, and the Democrats learn a lesson about getting scammed...

5.5AI score
SaveExploits0
NVD
NVD
added 2026/08/01 9:17 a.m.10 views

CVE-2026-17605

The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.56 via the getpaidpaymentformelement function. This makes it possible for authenticated attackers, with administrator-level acces...

6.6CVSS0.0071EPSS
SaveExploits0References10
GithubExploit
GithubExploit
added 2026/08/01 8:25 a.m.52 views

Exploit for Authentication Bypass Using an Alternate Path or Channel in Kestra

Kestra Unauthenticated RCE Exploit CVE-2026-53576 !Pyth...

10CVSS6.7AI score0.02186EPSS
SaveExploits3
Cvelist
Cvelist
added 2026/08/01 7:49 a.m.39 views

CVE-2026-15649 Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

6.4CVSS0.00201EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/01 7:16 a.m.10 views

CVE-2026-14596

The DynamicKit for Elementor WordPress plugin before 1.0.3 does not validate the host of a user-supplied URL used as the base of the password-reset link it emails, allowing unauthenticated attackers to send a target user a legitimately-formatted reset email whose link points to an...

8.8CVSS0.00223EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/01 7:16 a.m.8 views

CVE-2026-11882

The Builderall for WordPress plugin before 3.0.2 does not bind the state value of its public OAuth authentication routes to the initiating user session, allowing unauthenticated attackers to complete the connection flow and overwrite the stored third-party integration access token. A durable...

3.7CVSS0.00192EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/01 6:0 a.m.8 views

CVE-2026-13725

The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or user capabilities on one of its AJAX actions and reflects unsanitised user input in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against...

5.5AI score0.00164EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/01 12:30 a.m.14 views

EUVD-2026-51652

ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard.pkl file via...

9.8CVSS6.2AI score0.00623EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2026/08/01 12:10 a.m.8 views

SUSE CVE-2026-16530

A flaw was found in the PCP Performance Co-Pilot pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service...

8.2CVSS5.5AI score0.00299EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/01 12:0 a.m.7 views

PUB-A-493648935

In multiple functions of vpuioctl.c, there is a possible use after free due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS6.9AI score0.00329EPSS
SaveExploits1References1
NVD
NVD
added 2026/07/31 11:17 p.m.9 views

CVE-2026-45376

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the GET /admin/organization/users search interpolates params:term into raw Arel.sql ORDER BY similarity expressions before sanitization, allowing an authenticated...

5.5CVSS0.00341EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/31 10:34 p.m.56 views

CVE-2026-45376

CVE-2026-45376 affects Decidim admin user search. The vulnerability occurs when untrusted input from params[:term] is interpolated into raw SQL in ORDER BY clauses, allowing an authenticated organization administrator to cause time-based blind SQL injections via the sort expression. Affected path...

5.5CVSS5.7AI score0.00341EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/31 9:17 p.m.5 views

UBUNTU-CVE-2026-65981

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the resuming user's credentials but does not verify that identity against the original allocation owner, allowing an authenticated attacker...

7.1CVSS5.5AI score0.0025EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/31 9:0 p.m.7 views

CVE-2026-65981 Coturn: MOBILITY-TICKET session-resume authorization bypass allows cross-user TURN allocation takeover

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the resuming user's credentials but does not verify that identity against the original allocation owner, allowing an authenticated attacker...

7.1CVSS5.5AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/07/31 9:0 p.m.15 views

CVE-2026-65981

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the resuming user's credentials but does not verify that identity against the original allocation owner, allowing an authenticated attacker...

7.1CVSS5.5AI score0.0025EPSS
SaveExploits0
NVD
NVD
added 2026/07/31 8:16 p.m.11 views

CVE-2026-53551

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the free5GC AUSF Authentication Server Function does not validate the supiOrSuci field in UE authentication requests. Null bytes \x00 and other control characters pass through JSON parsing unchanged and are forwarded...

6.9CVSS0.00429EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/31 8:16 p.m.7 views

CVE-2026-18394

Incorrect authorization in the httprequest tool in Strands Agents Tools before 0.8.2 might allow remote attackers to obtain credentials configured via HTTPREQUESTTOKENCONFIG by influencing the LLM to route requests through actor-controlled proxy infrastructure. To remediate this issue, users shou...

7.4CVSS0.00294EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/31 5:45 p.m.9 views

EUVD-2026-51591

vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1.23.1, parseVaultConfig in pkg/webhook/config.go accepts the vault.security.banzaicloud.io/vault-addr annotation, MutateConfigMap and MutateSecret call newVaultClient in...

9.6CVSS5.5AI score0.0032EPSS
SaveExploits0References3
Rows per page
Query Builder