Lucene search
+L

2537 matches found

EUVD
EUVD
added 2026/05/13 3:41 p.m.18 views

EUVD-2026-30049

The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. Prior to 1.3834.0, the CoworkVMService component in Claude Desktop for Windows ran as SYSTEM and did not validate whether the VM bundle directory was a real directory or an NT...

8.5CVSS5.9AI score0.00156EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/05/13 3:41 p.m.9 views

CVE-2026-44470

The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. Prior to 1.3834.0, the CoworkVMService component in Claude Desktop for Windows ran as SYSTEM and did not validate whether the VM bundle directory was a real directory or an NT...

8.5CVSS5.9AI score0.00156EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.19 views

Claude Code 后置链接漏洞

Claude Code is an open-source terminal-native AI programming tool developed by Anthropic. Versions of Claude Code prior to 1.3834.0 contained a post-installation vulnerability. This vulnerability stemmed from the CoworkVMService component running with SYSTEM privileges and without verifying wheth...

8.5CVSS5.8AI score0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/12 9:17 p.m.89 views

CVE-2026-44242 Micronaut Framework: Unbounded bundleCache in ResourceBundleMessageSource Allows Memory Exhaustion via Accept-Language Header

Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Prior to 4.10.22, the bundleCache is keyed by Locale, baseName where the locale originates from the HTTP Accept-Language header. In applications that explicitly register a...

3.7CVSS0.00209EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/05/12 9:17 p.m.12 views

CVE-2026-44242

Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Prior to 4.10.22, the bundleCache is keyed by Locale, baseName where the locale originates from the HTTP Accept-Language header. In applications that explicitly register a...

3.7CVSS5.8AI score0.00209EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/05/12 12:00 a.m.22 views

Micronaut Framework 资源管理错误漏洞

The Micronaut Framework is a modern full-stack Java framework based on the JVM, developed by the Micronaut Foundation. Versions of the Micronaut Framework prior to 4.10.22 contained a resource management vulnerability. This vulnerability stemmed from the use of unbounded caching in the bundleCach...

3.7CVSS5.8AI score0.00209EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/07 9:05 p.m.15 views

GHSA-H4FW-6R7F-W494 Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy

Summary In version 5.3.0 of the Symfony bundle, Webauthn\Bundle\Policy\ClientOverridePolicy defaulted to allowing all client overrides, including userVerification. A client could send "userVerification": "discouraged" in the assertion or attestation options request to override a server-configured...

2.1CVSS5.9AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/05/07 9:05 p.m.24 views

Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy

Summary In version 5.3.0 of the Symfony bundle, Webauthn\Bundle\Policy\ClientOverridePolicy defaulted to allowing all client overrides, including userVerification. A client could send "userVerification": "discouraged" in the assertion or attestation options request to override a server-configured...

5.9AI score
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/05/07 8:21 p.m.17 views

CVE-2026-40326

Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the createBundle method in csettings.cfc does not properly validate anti-CSRF tokens for site bundle creation requests. An attacker can craft a malicious webpage or link that, when visited by a logged-in...

7.1CVSS5.7AI score0.00156EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/06 8:16 p.m.17 views

CVE-2026-40326

Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the createBundle method in csettings.cfc does not properly validate anti-CSRF tokens for site bundle creation requests. An attacker can craft a malicious webpage or link that, when visited by a logged-in...

7.1CVSS0.00156EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/05/06 7:57 p.m.23 views

Micronaut has Unbounded `bundleCache` in `ResourceBundleMessageSource` that Allows Memory Exhaustion via `Accept-Language` Header

Summary ResourceBundleMessageSource maintains two caches: messageCache bounded at 100 entries via ConcurrentLinkedHashMap and bundleCache unbounded ConcurrentHashMap. The bundleCache is keyed by Locale, baseName where the locale originates from the HTTP Accept-Language header. In applications tha...

3.7CVSS5.8AI score0.00209EPSS
SaveExploits0References6Affected Software1
Snyk
Snyk
added 2026/05/06 7:57 p.m.12 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the unbounded bundleCache in ResourceBundleMessageSource. An attacker can cause memory exhaustion and degrade service availability by sending numerous HTTP requests with uniqu...

6.3CVSS5.8AI score0.00209EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/06 7:57 p.m.141 views

GHSA-3RFQ-4WPF-QQW3 Micronaut has Unbounded `bundleCache` in `ResourceBundleMessageSource` that Allows Memory Exhaustion via `Accept-Language` Header

Summary ResourceBundleMessageSource maintains two caches: messageCache bounded at 100 entries via ConcurrentLinkedHashMap and bundleCache unbounded ConcurrentHashMap. The bundleCache is keyed by Locale, baseName where the locale originates from the HTTP Accept-Language header. In applications tha...

3.7CVSS5.8AI score0.00209EPSS
SaveExploits0References6
CVE
CVE
added 2026/05/06 7:57 p.m.28 views

CVE-2026-40326

Summary: Masa CMS (fork of Mura CMS) contains a CSRF flaw in the createBundle flow (csettings.cfc) that, in versions ≤7.5.2, can be abused by a logged-in admin to trigger silent site-bundle creation. The resulting bundle is written to a predictable public directory, enabling an unauthenticated ac...

7.1CVSS5.7AI score0.00156EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/05/06 7:57 p.m.10 views

CVE-2026-40326

Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the createBundle method in csettings.cfc does not properly validate anti-CSRF tokens for site bundle creation requests. An attacker can craft a malicious webpage or link that, when visited by a logged-in...

7.1CVSS5.7AI score0.00156EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/05/06 7:57 p.m.64 views

CVE-2026-40326 Masa CMS CSRF in site bundle creation allows unauthorized site data export

Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the createBundle method in csettings.cfc does not properly validate anti-CSRF tokens for site bundle creation requests. An attacker can craft a malicious webpage or link that, when visited by a logged-in...

7.1CVSS0.00156EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/06 7:57 p.m.11 views

CVE-2026-40326 Masa CMS CSRF in site bundle creation allows unauthorized site data export

Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the createBundle method in csettings.cfc does not properly validate anti-CSRF tokens for site bundle creation requests. An attacker can craft a malicious webpage or link that, when visited by a logged-in...

7.1CVSS5.8AI score
SaveExploits0References3
EUVD
EUVD
added 2026/05/06 7:57 p.m.15 views

EUVD-2026-28161

Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the createBundle method in csettings.cfc does not properly validate anti-CSRF tokens for site bundle creation requests. An attacker can craft a malicious webpage or link that, when visited by a logged-in...

7.1CVSS5.7AI score0.00156EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/06 7:57 p.m.11 views

CVE-2026-40326 Masa CMS CSRF in site bundle creation allows unauthorized site data export

Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the createBundle method in csettings.cfc does not properly validate anti-CSRF tokens for site bundle creation requests. An attacker can craft a malicious webpage or link that, when visited by a logged-in...

7.1CVSS5.7AI score0.00156EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/06 12:00 a.m.30 views

PT-2026-38293

Name of the Vulnerable Software and Affected Versions Micronaut Framework versions prior to 4.10.22 Description In applications that explicitly register a ResourceBundleMessageSource bean and serve HTML error responses, an unauthenticated attacker can cause heap memory exhaustion. This occurs...

3.7CVSS5.8AI score0.00209EPSS
SaveExploits0References7
Rows per page
Query Builder