CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

16284 matches found

NVD•added 2026/08/01 9:16 a.m.•36 views

CVE-2026-15450

The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in versions up to, and including, 9.2.3. This is due to the deletefile AJAX handler retrieving a file path from the database and passing it directly to unlink with no...

8.1CVSS0.00584EPSS

SaveExploits0References5

Positive Technologies•added 2026/08/01 12:00 a.m.•28 views

PT-2026-67074

Name of the Vulnerable Software and Affected Versions Nex Forms – Ultimate Form Builder – Lite versions prior to 9.2.4 Description An arbitrary file deletion issue exists due to path traversal. The delete file AJAX handler retrieves a file path from the database and passes it to the unlink functi...

8.1CVSS5.9AI score0.00584EPSS

SaveExploits0References8

NVD•added 2026/07/31 11:17 p.m.•18 views

CVE-2026-9044

An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper...

8.5CVSS0.02509EPSS

SaveExploits0References3

Vulnrichment•added 2026/07/31 10:20 p.m.•15 views

CVE-2026-9044 Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75

8.5CVSS6.6AI score0.02509EPSS

SaveExploits0References3

OSSF Malicious Packages•added 2026/07/31 9:55 p.m.•23 views

Malicious code in sap-mcp-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd73a0cce0624f18914a46c4fd174111ed722c842cd0d664a16299ac145385ce The package name suggests an SAP MCP configuration helper ships lib/report.js which, from a postinstall hook, collects developer identity data — emai...

5.7AI score

SaveExploits0References2

Snyk•added 2026/07/31 9:55 p.m.•21 views

Malicious Package

Overview sap-mcp-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score

SaveExploits0References2

OSV•added 2026/07/31 9:55 p.m.•18 views

MAL-2026-11481 Malicious code in sap-mcp-config (npm)

5.7AI score

SaveExploits0References2