Lucene search
+L

501518 matches found

Positive Technologies
Positive Technologies
added 5 days ago2 views

PT-2026-71919

NextAuth.js provides authentication for Next.js. Prior to @auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, the defaultNormalizer used by the email and magic-link sign-in flow validates an address before applying Unicode normalization. An address can contain a Unicode character such as...

9.1CVSS5.4AI score0.00528EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 5 days ago3 views

PT-2026-71715

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by [email protected], which seeds an ARC4 strea...

9.1CVSS5.3AI score0.00321EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 5 days ago2 views

PT-2026-71737

Vitest is a testing framework powered by Vite. Prior to versions 3.2.7, 4.1.10, and 5.0.0-beta.6, Browser Mode provider commands including upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, and annotateTraces accept browser-supplied file paths without enforcing the allowWri...

9.4CVSS5.5AI score0.00644EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 5 days ago2 views

PT-2026-71810

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPathoperation.key.setnewMetadata, value in...

8.5CVSS5.3AI score0.00334EPSS
SaveExploits0References5
Cvelist
Cvelist
added 5 days ago30 views

CVE-2026-67986

amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string when grep is called with a...

0.00192EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 5 days ago3 views

PT-2026-71712

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...

8.7CVSS5.3AI score0.00384EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 5 days ago4 views

CVE-2026-73242

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberosDecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

8.3CVSS5.4AI score0.0035EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 5 days ago9 views

CVE-2026-48791

sigstore-java is a sigstore java client for interacting with sigstore infrastructure. Version 2.0.0 erroneously removed verification of the integrated Rekor entry time against the Fulcio certificate. Version 2.1.0 re-added this verification with enhancements that adhere to the Sigstore verificati...

2CVSS5.4AI score0.00056EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 5 days ago6 views

CVE-2026-71217

A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as parallel and len, which are not properly validated by the server. This improper input validation can lead to excessive stream and thread...

7.5CVSS5.8AI score0.00417EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 5 days ago4 views

CVE-2026-68441

In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TCACTREDIRECT from qdisc filter chains When a TC filter attached to a qdisc filter chain returns TCACTREDIRECT ex: via an eBPF program calling bpfredirect or an actbpf action, the redirect was silently lost i.e ...

5.3AI score0.00148EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 5 days ago5 views

CVE-2026-73214

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtlsserverinputhandler and createnewconnectedudpsocket in src/apps/relay/dtlslistener.c retain OpenSSL dtls1reassemblefragment state for a 35-byte fragmented ClientHello declaring a 650,000-byte handshake before...

8.2CVSS5.4AI score0.00423EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 5 days ago8 views

CVE-2026-73212

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, goodpeeraddr in src/server/nsturnserver.c uses ioaaddrinrange in src/client/nsturnioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms, allowing an authenticated RFC 6062 T...

5.8CVSS5.3AI score0.00282EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 5 days ago4 views

CVE-2026-67990

basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user's browser to submit requests that are forwarded to enabled upstream write or management...

5.3AI score0.00139EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 5 days ago3 views

PT-2026-71918

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows notebook settings to be shared and applied through an overrides.json file using the Import button in the Settings...

8.6CVSS5.4AI score0.00552EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
added 5 days ago6 views

CVE-2026-19349

security update...

5AI score0.00265EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 5 days ago4 views

PT-2026-71714

node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname and no segment cap when tar.t... or tar.x... receives a non-empty member-selection list. A...

7.5CVSS5.3AI score0.00379EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 5 days ago3 views

PT-2026-71832

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser in apps/webapp/app/models/user.server.ts without requiring Google'...

7.4CVSS5.3AI score0.00362EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 5 days ago3 views

PT-2026-71733

phpList before 3.7.0-RC5 contains a cross-site request forgery CSRF vulnerability in lists/admin/admins.php. The administrator deletion action is triggered via an unauthenticated GET request ?page=admins&delete=N that is not protected by a CSRF token the central verifyCsrfGetToken check uses...

8.1CVSS5.1AI score0.00244EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 5 days ago6 views

PT-2026-71881

FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argument, and used to build filenames insid...

7.5CVSS5.6AI score0.00444EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 5 days ago3 views

PT-2026-71878

Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 4.4.2 until 4.5.0-rc.4, POST /api/v1/runs/:runParam/replay in apps/webapp/app/routes/api.v1.runs.$runParam.replay.ts uses prisma.taskRun.findUnique where: friendlyId: runParam without a...

4.2CVSS5.3AI score0.0016EPSS
SaveExploits0References5
Rows per page
Query Builder