Lucene search
+L

289138 matches found

OSV
OSV
added 21 hours ago5 views

UBUNTU-CVE-2026-72135

In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable The TPM character devices expose a sequential command/response interface, but their open handlers leave FMODEPREAD and FMODEPWRITE enabled. After a command leaves a response pendin...

7.8CVSS5.7AI score0.0021EPSS
SaveExploits0References11
CVE
CVE
added 21 hours ago1 views

CVE-2026-67917

zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality. The azuracast:restore command executes the db.sql file extracted from a backup archive without any content validation or sanitization. This allows a remote attacker to escalate...

SaveExploits0References2
OSV
OSV
added 21 hours ago3 views

UBUNTU-CVE-2026-72130

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTHRECEIVE buffers nvmetexecuteauthreceive trusts the AUTHRECEIVE allocation length after checking only that it is nonzero and matches the transfer length. In the SUCCESS1 and FAILURE1/default states, th...

9.8CVSS5.8AI score0.0024EPSS
SaveExploits0References7
OSV
OSV
added 21 hours ago3 views

UBUNTU-CVE-2026-74443

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: bound DMA command body size against suffix pointer vmwcmddma locates the DMA suffix at unsigned long &cmd-body + header-size - sizeofsuffix without checking that header-size is large enough to contain both cmd-body an...

8.8CVSS5.4AI score0.00168EPSS
SaveExploits0References8
OSV
OSV
added 21 hours ago3 views

UBUNTU-CVE-2026-72335

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix adv monitor add failure cleanup hciaddadvmonitor publishes a new advmonitor in hdev-advmonitorsidr before the powered MSFT setup step. The MSFT offload add path can then fail either locally before the...

7.8CVSS5.7AI score0.00215EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-19963

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

7.4CVSS7.1AI score
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added yesterday4 views

CVE-2026-19963 Edimax EW-7478APC stainfo command injection

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

7.4CVSS7.1AI score
SaveExploits0References5
Cvelist
Cvelist
added yesterday8 views

CVE-2026-19963 Edimax EW-7478APC stainfo command injection

A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument interface leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

7.4CVSS
SaveExploits0References5
CVE
CVE
added yesterday28 views

CVE-2026-19963

The CVE-2026-19963 affects Edimax EW-7478APC 1.04. The vulnerability is in the stainfo function of /goform/stainfo, where manipulation of the interface argument leads to a remote command injection. Public exploit availability and disclosure indicate potential active abuse; the vendor was contacte...

7.4CVSS7.2AI score
SaveExploits0References5
NVD
NVD
added yesterday6 views

CVE-2026-19960

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may...

7.4CVSS
SaveExploits0References5
Cvelist
Cvelist
added yesterday7 views

CVE-2026-19962 Edimax EW-7478APC setWAN command injection

A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has...

7.4CVSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added yesterday6 views

CVE-2026-19962

A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argument pppUserName/pptpUserName/L2TPUserName can lead to command injection. The attack may be performed from remote. The exploit has...

7.4CVSS7.2AI score
SaveExploits0References5Affected Software1
CVE
CVE
added yesterday23 views

CVE-2026-19962

Edimax EW-7478APC (firmware 1.04) contains a flaw in the setWAN function (/goform/setWAN). Remote attacker can inject commands by manipulating pppUserName, pptpUserName, or L2TPUserName, enabling command execution. The exploit has been published and is usable; vendor was contacted but did not res...

7.4CVSS7.1AI score
SaveExploits0References5
CVE
CVE
added yesterday24 views

CVE-2026-19960

CVE-2026-19960 affects Edimax EW-7478APC, firmware 1.04. The issue lies in the formWlbasic handler in /goform/formWlbasic, where manipulation of the rootAPmac argument enables command injection. This can be triggered remotely and the exploit has been publicly disclosed. No remediation details are...

7.4CVSS7.1AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-19960

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may...

7.4CVSS7.1AI score
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added yesterday25 views

CVE-2026-19960 Edimax EW-7478APC formWlbasic command injection

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may...

7.4CVSS
SaveExploits0References5
GithubExploit
GithubExploit
added yesterday17 views

Exploit for CVE-2026-18366

CVE-2026-18366 Events Manager 7.4.1 - Unauthenticated Pri...

9.8CVSS5.7AI score0.00303EPSS
SaveExploits1
OSV
OSV
added yesterday13 views

MAL-2026-14069 Malicious code in kb-ai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 edd64785c168e513c50673e9b031048ba592c1460a9a952f9430feb83bf5042d The main purpose of the package is to demonstrate a dependency confusion attack. The rest of the functionality is just a stub. --- Category: PROBABLYPENTEST -...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday8 views

Malicious code in kb-ai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 edd64785c168e513c50673e9b031048ba592c1460a9a952f9430feb83bf5042d The main purpose of the package is to demonstrate a dependency confusion attack. The rest of the functionality is just a stub. --- Category: PROBABLYPENTEST -...

5.8AI score
SaveExploits0References1
Nuclei
Nuclei
added yesterday217 views

Apache Struts2 S2-052 - Remote Code Execution

The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type of filtering, which can lead to remote code execution when deserializing XML payloads. id: CVE-2017-9805 info: name:...

8.1CVSS8.3AI score0.99396EPSS
SaveExploits24References5
Rows per page
Query Builder