Lucene search
+L

1119580 matches found

NVD
NVD
added yesterday7 views

CVE-2026-19942

The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the AVCFAbilitiesMedia::register replace-media-file executecallback function in all versions ...

8.1CVSS0.00687EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-72314

A flaw was found in the Linux kernel's regulator core. The regulatorlocktwo function, responsible for acquiring two regulators, incorrectly checks for an error code EDEADLOCK instead of the correct one EDEADLK. On certain architectures, such as MIPS, SPARC, and PowerPC, this discrepancy means tha...

7.8CVSS5.5AI score0.00176EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday5 views

Malicious code in modsync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b786780800de5689c4ae50377166b26050fd688ec5d75cfb14fda990b92494 The package presents itself as a pino-like logger/middleware README, docs/, and index.d.ts copied from pinojs/pino; keywords fast/logger/stream/json...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday6 views

Malicious code in api-rs-tuils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e65df9ad10889610f658c482041bdcf8c06d3c147da5cec709f246a1fa363c4 [email protected] runs a malicious postinstall hook node test.js that executes obfuscated code in index.js against the installer's machine. The code...

5.7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday6 views

Malicious code in ranux-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2844c37c95371d0fa96d0a814be948335590d5b65500a8f4b2a577c8748e23 The package main index.js is obfuscator.io-transformed with a rotated string-array decoder and, at top level, uses createDecipheriv with a hardcoded...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday7 views

Malicious code in ranux-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535aa6b18b45b3ade8ae934157747b2a3281c298e38c7a8aa308236ba3c941a2 package.json advertises the package as a 'High-performance async network socket & runtime protocol engine', but the tarball ships a multi-tenant...

5.5AI score
SaveExploits0References1
Circl
Circl
added yesterday6 views

CVE-2026-76038

creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:33+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819...

8.8CVSS4.8AI score0.00394EPSS
SaveExploits0References1
Circl
Circl
added yesterday6 views

CVE-2026-74972

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:34+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

4.3CVSS4.8AI score0.00278EPSS
SaveExploits0References1
Circl
Circl
added yesterday5 views

CVE-2026-74971

creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:32+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

4.3CVSS4.8AI score0.00278EPSS
SaveExploits0References1
Circl
Circl
added yesterday5 views

CVE-2026-74949

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 09:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtix3ozgqv22...

8.8CVSS4.8AI score0.00333EPSS
SaveExploits0References2
Circl
Circl
added yesterday5 views

CVE-2026-74948

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

4.8AI score0.0016EPSS
SaveExploits0References1
Circl
Circl
added yesterday5 views

CVE-2026-74941

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:23+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 11:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtj44msevn2y...

8.8CVSS4.8AI score0.00344EPSS
SaveExploits0References2
Circl
Circl
added yesterday5 views

CVE-2026-74936

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

4.8AI score0.00156EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday6 views

Malicious code in secp256k1-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd45f2520f57a18e182ea26170f8d6d3b4296929c66dbbf2ea0eb632adb1f46a Package name mimics the widely used secp256k1 cryptography library but contains no cryptographic functionality. The declared main index.js is a singl...

5.4AI score
SaveExploits0References4
OSV
OSV
added yesterday4 views

MAL-2026-14255 Malicious code in secp256k1-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd45f2520f57a18e182ea26170f8d6d3b4296929c66dbbf2ea0eb632adb1f46a Package name mimics the widely used secp256k1 cryptography library but contains no cryptographic functionality. The declared main index.js is a singl...

5.5AI score
SaveExploits0References4
EUVD
EUVD
added yesterday9 views

EUVD-2026-62230

The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the AVCFAbilitiesMedia::register replace-media-file executecallback function in all versions ...

8.1CVSS6.5AI score0.00687EPSS
SaveExploits0References8
OSV
OSV
added yesterday3 views

MAL-2026-14250 Malicious code in luluking1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd9bc7980d937f728e8beb92d789d75a1dc02fd56bdfb545cd33f255952bcf4 index.js stores a remote URL and a curl -sL -o command as numeric char-code arrays and reconstructs them at runtime with String.fromCharCode.apply,...

6.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday5 views

Malicious code in luluking1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd9bc7980d937f728e8beb92d789d75a1dc02fd56bdfb545cd33f255952bcf4 index.js stores a remote URL and a curl -sL -o command as numeric char-code arrays and reconstructs them at runtime with String.fromCharCode.apply,...

6.4AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday5 views

Malicious code in npm-wold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731c22e563f2ea15800d87f345de9b8363c0c715e9f39606201d47a8fb422ab1 [email protected] declares a postinstall script node dist/config.js that, on npm install, issues an HTTPS GET to the hardcoded endpoint...

6.2AI score
SaveExploits0References2
Nuclei
Nuclei
added yesterday129 views

Juniper J-Web - Remote Code Execution

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...

9.8CVSS7.8AI score0.93667EPSS
SaveExploits26References5
Rows per page
Query Builder