Lucene search
+L

1135344 matches found

CVE
CVE
added 2026/09/02 4:59 p.m.14 views

CVE-2026-84809

Tencent AI-Infra-Guard 's skill-scan component (affected in v4.6.0) hardcodes __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. An attacker can distribute a skill containing benign Python source files alongside malicious compiled bytecode tha...

7.1CVSS6.2AI score0.00315EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/02 4:47 p.m.6 views

CVE-2023-32692-CodeIgniter4

CVE-2023-32692 — Inyección de reglas de validación en CodeIgniter 4 CVE-2023-32692 es una vulnerabilidad de inyección de código en el framework PHP CodeIgniter 4, que afecta a las versiones 4.0.0 a 4.3.4. Se corrigió en 4.3.5 publicada en junio de 2023. Este es un entorno de demostración para...

9.8CVSS8.2AI score0.01126EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 4:45 p.m.7 views

CVE-2026-23885

Security Advisory: CVE-2026-23885 Authenticated Remote Code Execution RCE in AlchemyCMS 1. Executive Summary A critical security vulnerability involving Improper Neutralization of Directives in Dynamically Evaluated Code CWE-95 was discovered in the AlchemyCMS framework. The vulnerability allows...

9.9CVSS5.9AI score0.00442EPSS
SaveExploits0
CVE
CVE
added 2026/09/02 4:40 p.m.29 views

CVE-2026-52831

CVE-2026-52831 affects Nuclio , a serverless framework for real-time events and data processing. In versions prior to 1.16.4 , the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container (/bin/sh, -c, ). Two fields in the...

8CVSS7AI score0.00319EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 4:39 p.m.6 views

CVE-2026-4802

CVE-2026-4802 - Remote Code Execution via Command Injection in Cockpit A proof-of-concept exploit for CVE-2026-4802, a Remote Code Execution via Command Injection in Cockpit's system logs UI loadServiceFilters Setup Build and run the vulnerable environment: root@kitploit: $ docker build -t...

8CVSS7.2AI score0.01016EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/02 4:38 p.m.9 views

EUVD-2026-70216

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio's Java runtime generates a build.gradle file during function builds using Go's text/template package. The template renders runtimeAttributes.repositories values with the . action, which...

8CVSS7.3AI score0.0033EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/02 4:30 p.m.5 views

CVE-2026-82404 TOON: Prototype pollution when decoding untrusted TOON input

TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a proto, constructor, or prototype key wrote through the object prototype chain instead of creating an own property, polluting Object.prototype for the runtime. In...

8.3CVSS6.1AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/02 4:30 p.m.31 views

CVE-2026-82404 TOON: Prototype pollution when decoding untrusted TOON input

TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a proto, constructor, or prototype key wrote through the object prototype chain instead of creating an own property, polluting Object.prototype for the runtime. In...

8.3CVSS0.00398EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/02 4:30 p.m.5 views

SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit

= doi.org/10.5281/zenodo.18278825 = orcid.org/0009-0007-7728-256X RECONSTRUCTIONANALYSIS CVE-2026-21858: Ni8mare - n8n RCE Full Chain Exploit 1. Executive Summary & Overview This document presents a deterministic technical reconstruction analysis of the CVE-2026-21858 vulnerability, internally...

10CVSS8.3AI score0.78447EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/02 4:20 p.m.7 views

wasm2c-tableflip

wasm2c sandbox escape: guest module runs a shell command on the host Read the blog: trustsig.eu/blog wasmrtallocatefuncreftable in wasm2c/wasm-rt-impl-tableops.inc sets table-size from the module's declared element count and then ignores the result of calloc. When the allocation fails the table i...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 4:19 p.m.6 views

CVE-2026-2441

CSS in Google Chrome prior to Remote Code Execution CVE-2026-2441 Overview A HIGH vulnerability, classified as CVE-2026-2441, has been identified, categorized under CWE-416, CWE-416, CVSS 8.8. Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute...

8.8CVSS8.1AI score0.2202EPSS
SaveExploits12
NVD
NVD
added 2026/09/02 4:17 p.m.5 views

CVE-2026-84670

Jenkins Performance Plugin 1015.v09ca52b3370e and earlier does not restrict the classes that can be instantiated when deserializing cached performance reports stored in the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary code on th...

8.8CVSS0.00373EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/02 4:17 p.m.7 views

CVE-2026-84671

Jenkins File Parameter Plugin 425.v3fa801681b5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution...

8.8CVSS0.00566EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/02 4:17 p.m.7 views

CVE-2026-84645

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...

8.8CVSS0.00666EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/02 4:15 p.m.5 views

Nest

!Issueshttps://img.shields.io/github/issues/owasp/nest?color=blue&style=...

5.8AI score
SaveExploits0References17
Kitploit
Kitploit
added 2026/09/02 4:13 p.m.5 views

joern

Base de datos de consultas de Joern "Joern-Scan" Esta es la base de datos central de consultas para la plataforma de análisis de código abierto Joern. Tiene dos propósitos: Proporciona las baterías necesarias para convertir Joern en una herramienta de escaneo de código lista para usar. Sus...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/02 4:13 p.m.100 views

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

5.7AI score
SaveExploits0References2
CVE
CVE
added 2026/09/02 4:13 p.m.93 views

CVE-2026-20212

CVE-2026-20212 affects the Silicon One Hardware Abstraction Layer (S1HAL) in Cisco Nexus 9000 Series Switches . The root cause is that TCP ports 43210 and 43211 are accessible in the default Layer 3 VRF, allowing an unauthenticated, remote attacker to send crafted input that executes code with ro...

9.8CVSS6AI score0.00527EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 4:13 p.m.9 views

EUVD-2026-70201

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...

9.8CVSS6AI score0.00527EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 4:13 p.m.41 views

CVE-2026-20212 Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...

9.8CVSS0.00527EPSS
SaveExploits0References1
Rows per page
Query Builder