Lucene search
+L

4691 matches found

GithubExploit
GithubExploit
added 14 hours ago15 views

Exploit for CVE-2026-64561

CVE-2026-64561 Donate Support the maintenance of this pro...

5.7AI score0.00157EPSS
SaveExploits1
EUVD
EUVD
added 15 hours ago7 views

EUVD-2026-54313

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 15 hours ago6 views

EUVD-2026-54319

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

9.1CVSS5.7AI score
SaveExploits0References2
EUVD
EUVD
added 15 hours ago6 views

EUVD-2026-54312

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

9.6CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 15 hours ago7 views

EUVD-2026-54318

Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 15 hours ago6 views

EUVD-2026-54317

'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...

9.9CVSS5.5AI score
SaveExploits0References2
NVD
NVD
added 15 hours ago4 views

CVE-2026-68823

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

9.1CVSS
SaveExploits0References1
NVD
NVD
added 15 hours ago4 views

CVE-2026-59115

'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...

9.9CVSS
SaveExploits0References1
NVD
NVD
added 15 hours ago4 views

CVE-2026-56161

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

9.6CVSS
SaveExploits0References1
NVD
NVD
added 15 hours ago6 views

CVE-2026-50481

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

9.9CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-50515

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

9.9CVSS5.7AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-59115

'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...

9.9CVSS5.5AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-50481

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

9.9CVSS5.5AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-62896

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

9.6CVSS5.5AI score
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added yesterday6 views

Azure Service Bus Remote Code Execution Vulnerability

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

9.9CVSS5.7AI score
SaveExploits0
NVD
NVD
added 2 days ago6 views

CVE-2026-70615

boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorizedkeys file by supplying a percent-encoded newline character in the domain parameter...

9.9CVSS0.00215EPSS
SaveExploits0References2
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-53584

boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorizedkeys file by supplying a percent-encoded newline character in the domain parameter...

9.9CVSS5.7AI score0.00215EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-70615

boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorizedkeys file by supplying a percent-encoded newline character in the domain parameter...

9.9CVSS5.7AI score0.00215EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago26 views

CVE-2026-70615

Boringproxy 0.10.0 is affected by a newline injection in the tunnel-creation endpoint’s domain parameter, enabling authenticated, low-privilege users with tunnel-creation permission to inject lines into the SSH authorized_keys file. This may allow insertion of an unrestricted public key, granting...

9.9CVSS5.7AI score0.00215EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago23 views

CVE-2026-71269

CVE-2026-71269 affects Node-RED’s local-filesystem library storage module (getLibraryEntry() and saveLibraryEntry() in packages/node_modules/@node-red/runtime/lib/storage/localfilesystem/library.js). The vulnerability arises because GET/POST requests to /library/:lib/:type/*path join the user-sup...

7.2CVSS6.5AI score0.0059EPSS
SaveExploits1References2
Rows per page
Query Builder