Lucene search
+L

348103 matches found

Cvelist
Cvelist
added 57 minutes ago4 views

CVE-2026-63766 GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands executed with shell=True. Attackers can inject shell metacharacters through path...

9.8CVSS
Exploits0References2
CVE
CVE
added 57 minutes ago5 views

CVE-2026-63766 GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands executed with shell=True. Attackers can inject shell metacharacters through path...

9.8CVSS
Exploits0References2
NVD
NVD
added 57 minutes ago5 views

CVE-2026-64193

Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDEDERROR::decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option RFC 8914 by tokenising the raw bytes and passing the result to Perl's eval. There is some...

Exploits0References3
NVD
NVD
added 57 minutes ago5 views

CVE-2026-63108

Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting command substitutions inside parameter expansion defaults. The command parser in parse-command.ts replaces parameter...

8.8CVSS
Exploits0References2
NVD
NVD
added 58 minutes ago4 views

CVE-2026-48389

DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS
Exploits0References1
Mageia
Mageia
added 1 hour ago1 views

Updated haveged package fixes a security vulnerability

The updated package fixes a security vulnerability: Privilege escalation via command socket. CVE-2026-41054...

7.8CVSS5.2AI score0.00185EPSS
Exploits0References2
Cvelist
Cvelist
added 1 hour ago7 views

CVE-2026-63108 Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing

Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting command substitutions inside parameter expansion defaults. The command parser in parse-command.ts replaces parameter...

8.8CVSS
Exploits0References2
CVE
CVE
added 1 hour ago6 views

CVE-2026-63108

Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting command substitutions inside parameter expansion defaults. The command parser in parse-command.ts replaces parameter...

8.8CVSS5.8AI score
Exploits0References2
EUVD
EUVD
added 1 hour ago2 views

EUVD-2026-46065

Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting command substitutions inside parameter expansion defaults. The command parser in parse-command.ts replaces parameter...

8.8CVSS
Exploits0References2
GithubExploit
GithubExploit
added 1 hour ago6 views

Exploit for CVE-2026-63030

CVE-2026-63030 WordPress REST Batch Route-Confusion SQL I...

9.8CVSS7AI score0.08946EPSS
Exploits46
NVD
NVD
added 1 hour ago4 views

CVE-2026-46715

Flask-Security-Too allows users to add security features to their Flask applicationa. Version 5.8.0's OAuth reauthentication flow can mark a session as fresh after verifying an OAuth account that belongs to a different user. If an attacker can operate an already-authenticated but stale victim...

5.3CVSS0.00035EPSS
Exploits0References2
Cvelist
Cvelist
added 2 hours ago6 views

CVE-2026-48389 DNG SDK | Stack-based Buffer Overflow (CWE-121)

DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2 hours ago3 views

CVE-2026-48389 DNG SDK | Stack-based Buffer Overflow (CWE-121)

DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.2AI score
Exploits0References1
CVE
CVE
added 2 hours ago6 views

CVE-2026-48389

DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.2AI score
Exploits0References1
EUVD
EUVD
added 2 hours ago2 views

EUVD-2026-46062

DNG SDK versions 1.7.1 2536 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS
Exploits0References1
Cvelist
Cvelist
added 2 hours ago3 views

CVE-2026-64193 Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR

Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDEDERROR::decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option RFC 8914 by tokenising the raw bytes and passing the result to Perl's eval. There is some...

Exploits0References3
CVE
CVE
added 2 hours ago3 views

CVE-2026-64193

Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDEDERROR::decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option RFC 8914 by tokenising the raw bytes and passing the result to Perl's eval. There is some...

5.8AI score
Exploits0References3
EUVD
EUVD
added 2 hours ago2 views

EUVD-2026-46051

Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDEDERROR::decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option RFC 8914 by tokenising the raw bytes and passing the result to Perl's eval. There is some...

Exploits0References3
OSV
OSV
added 2 hours ago2 views

GHSA-XJ6Q-8X83-JV6G Axios: Prototype pollution auth subfields can inject Basic auth

Summary Axios versions after the GHSA-q8qp-cvcw-x6jj fix still contain prototype-pollution read-side gadgets in Basic auth subfield handling. If a host application is already affected by prototype pollution and then makes an axios request with an own auth object that omits username or password,...

6.3CVSS6.3AI score
Exploits0References5
RedhatCVE
RedhatCVE
added 2 hours ago3 views

CVE-2026-63845

A flaw was found in the Linux kernel, specifically within the AMD GPU's JPEG Joint Photographic Experts Group ring component. This vulnerability occurs because the JPEG v4.0 rings do not support 64-bit user fence writes. This can lead to the system rejecting command submissions that utilize user...

7.8CVSS5.4AI score
Exploits0References4
Rows per page
Query Builder