Lucene search
+L

133483 matches found

Nuclei
Nuclei
added 3 days ago112 views

Adobe ColdFusion - Arbitrary File Read

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary...

7.4CVSS8.2AI score0.98514EPSS
SaveExploits7References5
Nuclei
Nuclei
added 3 days ago53 views

WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion

WordPress core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are vulnerable to a pre-authentication route confusion issue in the REST API batch endpoint /?restroute=/batch/v1. A malformed nested batch request desynchronizes the batch router, allowing unauthenticated requests to reach...

9.8CVSS9.6AI score0.95605EPSS
SaveExploits75References6
Nuclei
Nuclei
added 3 days ago58 views

Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are susceptible to directory traversal vulnerabilities that could allow an unauthenticated, remote attacker to obtain read and delete access to sensitive files on a targeted system. id: CVE-2020-3187...

9.1CVSS8.5AI score0.96595EPSS
SaveExploits4References5
NVD
NVD
added 3 days ago9 views

CVE-2026-19976

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...

6.6CVSS0.02055EPSS
SaveExploits0References5
CVE
CVE
added 3 days ago21 views

CVE-2026-19976

CVE-2026-19976 affects COMFAST CF-N1-S firmware 2.6.0.1. The vulnerability exists in the function sub_44A968 within /cgi-bin/mbox-config?method=SET&section=ptest_macaddress, where improper handling of the macaddress argument enables remote command injection. The issue can be exploited remotely; p...

6.6CVSS6.4AI score0.02055EPSS
SaveExploits0References5
Cvelist
Cvelist
added 3 days ago38 views

CVE-2026-19976 COMFAST CF-N1-S mbox-config sub_44A968 command injection

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...

6.6CVSS0.02055EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 3 days ago7 views

CVE-2026-19976

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...

6.6CVSS6.4AI score0.02055EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 3 days ago5 views

EUVD-2026-60036

A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptestmacaddress. Such manipulation of the argument macaddress leads to command injection. The attack may be launched remotely. The exploit...

6.6CVSS6.4AI score0.02055EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 3 days ago29 views

Exploit for CVE-2026-74251

Unauthenticated SQL Injection via Attribute Filter in Phoca Ca...

9.3CVSS7.2AI score0.00372EPSS
SaveExploits1
OSV
OSV
added 3 days ago2 views

DEBIAN-CVE-2026-19967

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

5.3CVSS6AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
added 3 days ago7 views

CVE-2026-19967

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

7.5CVSS0.00264EPSS
SaveExploits0References6
OSV
OSV
added 3 days ago3 views

UBUNTU-CVE-2026-19967

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

6.3CVSS6AI score0.00264EPSS
SaveExploits0References8
Cvelist
Cvelist
added 3 days ago35 views

CVE-2026-19967 Open Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflow

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

7.5CVSS0.00264EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 3 days ago4 views

CVE-2026-19967 Open Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflow

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

7.5CVSS6.7AI score0.00264EPSS
SaveExploits0References6
EUVD
EUVD
added 3 days ago6 views

EUVD-2026-60015

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

7.5CVSS7AI score0.00264EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 3 days ago4 views

CVE-2026-19967

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

7.5CVSS6.7AI score0.00264EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 3 days ago6 views

CVE-2026-19967

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be...

7.5CVSS6.9AI score0.00264EPSS
SaveExploits0
CVE
CVE
added 3 days ago35 views

CVE-2026-19967

The CVE concerns Open Asset Import Library (Assimp) with a heap-based buffer overflow in the File Parser subsystem. Affected is the function Assimp::Compression::decompressBlock in code/Common/Compression.cpp. Described impact indicates remote initiation is possible, with the exploit publicly rel...

7.5CVSS7AI score0.00264EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 3 days ago7 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100713)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100713 advisory. In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context address compression The second memcpy in...

5.5CVSS5.4AI score0.00115EPSS
SaveExploits0References4
CVE
CVE
added 3 days ago31 views

CVE-2026-67919

An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory components...

9.8CVSS6AI score0.007EPSS
SaveExploits1References2
Rows per page
Query Builder