Lucene search
+L

980 matches found

Nuclei
Nuclei
added 2026/08/23 2:28 a.m.91 views

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

5.4CVSS5.2AI score0.01331EPSS
SaveExploits1References2
Circl
Circl
added 2026/08/21 10:07 p.m.9 views

CVE-2026-61539

creationtimestamp| type| source ---|---|--- 2026-08-21 22:07:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtmriqo3j62t 2026-08-21 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtmw42zhcu2u 2026-08-22 02:01:53+00:00| seen|...

10CVSS4.7AI score0.00657EPSS
SaveExploits0References6
Circl
Circl
added 2026/08/21 5:01 p.m.11 views

CVE-2026-54789

creationtimestamp| type| source ---|---|--- 2026-08-21 17:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmafa7lrx22...

7.5CVSS4.7AI score0.00393EPSS
SaveExploits0References1
Nuclei
Nuclei
added 2026/08/20 4:29 a.m.220 views

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

9.8CVSS9.3AI score0.99471EPSS
SaveExploits21References2
OSV
OSV
added 2026/08/19 1:47 p.m.3 views

MINI-FWFW-CQ57-CRMH

Bulletin has no description...

8.4CVSS4.9AI score0.00107EPSS
SaveExploits0
OSV
OSV
added 2026/08/17 7:54 p.m.6 views

MINI-24C2-9722-RMFP

Bulletin has no description...

7.5CVSS5AI score0.00483EPSS
SaveExploits0
OSV
OSV
added 2026/08/16 7:27 a.m.5 views

MINI-FM6R-43WW-39Q7

Bulletin has no description...

7.5CVSS5AI score0.00465EPSS
SaveExploits0
OSV
OSV
added 2026/08/15 6:22 a.m.5 views

DEBIAN-CVE-2026-74316

In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4droprevokedstid nfsd4droprevokedstid has no SCTYPELAYOUT case, so when a client sends FREESTATEID for an admin-revoked layout stid, the default branch releases cllock and returns without unhashing...

7.5CVSS5.3AI score0.00446EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/11 11:51 a.m.3 views

SUSE-SU-2026:3576-1 Security update for himmelblau, himmelblau.SUSE_SLE-15-SP5_Update

This update for himmelblau, himmelblau.SUSESLE-15-SP5Update fixes the following issues: Security fixes: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270182. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback wh...

9.3CVSS6.2AI score0.00359EPSS
SaveExploits0References21
RedhatCVE
RedhatCVE
added 2026/08/05 3:40 p.m.9 views

CVE-2026-69198

A flaw was found in ip-address, a JavaScript library for parsing and manipulating IP addresses. By appending a Classless Inter-Domain Routing CIDR suffix to an IP address, an attacker can bypass the library's special-use classification methods. This misclassification can lead applications, such a...

6.9CVSS5.4AI score0.00276EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/08/05 12:29 a.m.11 views

SUSE CVE-2026-69198

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...

6.9CVSS5.5AI score0.00276EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
added 2026/08/04 12:00 a.m.9 views

ShielDroid: A Hybrid Approach Integrating Machine and Deep Learning for Android Malware Detection

The rapid advancement of modern technology has led to a significant increase in the use of smart devices, such as smartphones and tablets, resulting in the widespread adoption of mobile applications. Although applications are required to undergo malware screening before being published on officia...

5.7AI score
SaveExploits0
NVD
NVD
added 2026/08/03 8:17 p.m.11 views

CVE-2026-69198

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...

6.9CVSS0.00276EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/03 8:17 p.m.5 views

DEBIAN-CVE-2026-69198

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...

6.9CVSS5.6AI score0.00276EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/03 8:17 p.m.6 views

UBUNTU-CVE-2026-69198

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...

6.9CVSS5.5AI score0.00276EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/03 7:59 p.m.9 views

EUVD-2026-52422

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...

6.9CVSS5.6AI score0.00276EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/03 7:59 p.m.10 views

CVE-2026-69198

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...

6.9CVSS5.6AI score0.00276EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/08/03 7:59 p.m.56 views

CVE-2026-69198 ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...

6.9CVSS0.00276EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/03 7:59 p.m.77 views

CVE-2026-69198

The CVE affects the ip-address JavaScript library (versions 10.1.1–10.2.2). A defect in the containment guard in classification (built on isInSubnet) makes special-use checks (isLoopback, isPrivate, isLinkLocal, isCGNAT, isMulticast, isUnspecified, isBroadcast, isULA, getType) return an internal ...

6.9CVSS5.6AI score0.00276EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/03 12:00 a.m.24 views

PT-2026-67499

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...

6.9CVSS5.6AI score0.00276EPSS
SaveExploits0References4
Rows per page
Query Builder