Lucene search
+L

1806 matches found

CVE
CVE
added 2026/08/25 7:05 p.m.4 views

CVE-2026-78379

Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...

9.2CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/25 7:05 p.m.2 views

CVE-2026-78379 Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools

Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...

9.2CVSS
SaveExploits0References2
NVD
NVD
added 2026/08/25 12:16 p.m.6 views

CVE-2026-17587

The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

5.3CVSS
SaveExploits0References6
NVD
NVD
added 2026/08/25 11:16 a.m.6 views

CVE-2026-79652

A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. This component handles various OAuth2 and OpenID Connect grant types used for issuing access tokens. The issue occurs because the JWT Bearer grant fails to...

5.9CVSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/25 11:07 a.m.9 views

CVE-2026-79652 Keycloak-services: keycloak-services: jwt bearer authorization grant does not enforce consentrequired

A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. This component handles various OAuth2 and OpenID Connect grant types used for issuing access tokens. The issue occurs because the JWT Bearer grant fails to...

5.9CVSS
SaveExploits0References2
CVE
CVE
added 2026/08/25 11:07 a.m.16 views

CVE-2026-79652

A flaw in the JWT Bearer authorization grant within the keycloak-services component of Red Hat Build of Keycloak fails to verify whether a client requires user consent before issuing an access token. An authenticated attacker with valid client credentials and a trusted identity provider assertion...

5.9CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 11:07 a.m.6 views

EUVD-2026-65465

A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. This component handles various OAuth2 and OpenID Connect grant types used for issuing access tokens. The issue occurs because the JWT Bearer grant fails to...

5.9CVSS5.3AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/25 11:07 a.m.6 views

CVE-2026-79652

A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. This component handles various OAuth2 and OpenID Connect grant types used for issuing access tokens. The issue occurs because the JWT Bearer grant fails to...

5.9CVSS4.9AI score
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.35 views

Beautiful Cookie Consent Banner < 2.10.2 - Cross-Site Scripting

The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nscbarcontenthref' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS6.3AI score0.84461EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/24 8:26 p.m.139 views

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

7.3AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/24 8:03 p.m.30 views

reportly

Reportly is an EntraID user activity report tool. About the tool This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following: 1. Information about t...

7.5AI score
SaveExploits0
Cvelist
Cvelist
added 2026/08/22 12:26 p.m.27 views

CVE-2026-58002 WWBN AVideo Authorization Bypass via Users_affiliations add.json.php

WWBN AVideo through commit 9c39d8c8b4c1f75540788d6b391740852ceb0732 contains an authorization bypass vulnerability in the Usersaffiliations add.json.php endpoint that allows authenticated users to forge two-party consent records by supplying the counterparty's agreement timestamp. Attackers can...

7.1CVSS0.0014EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/22 12:26 p.m.14 views

CVE-2026-58002

WWBN AVideo (through commit 9c39d8c8) contains an authorization bypass in the Users_affiliations add.json.php endpoint. An authenticated attacker can forge a two-party consent record by supplying the counterparty's agreement timestamp, creating a forged affiliation with status='a'. The videoAddNe...

7.1CVSS5.7AI score0.0014EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/20 7:16 p.m.11 views

CVE-2026-66001

Frappe is a full-stack web application framework. Prior to 15.114.0 and 16.26.0, the approve and authorize functions in frappe/integrations/oauth2.py allow the OAuth2 consent flow to proceed without restricting approve to POST, without a csrftoken in...

8.5CVSS0.00233EPSS
SaveExploits0References9
OSV
OSV
added 2026/08/20 6:27 p.m.8 views

CVE-2026-66001 Frappe: Improper Authorization in OAuth2 Consent Endpoint

Frappe is a full-stack web application framework. Prior to 15.114.0 and 16.26.0, the approve and authorize functions in frappe/integrations/oauth2.py allow the OAuth2 consent flow to proceed without restricting approve to POST, without a csrftoken in...

8.5CVSS5.5AI score
SaveExploits0References11
EUVD
EUVD
added 2026/08/20 6:27 p.m.10 views

EUVD-2026-63540

Frappe is a full-stack web application framework. Prior to 15.114.0 and 16.26.0, the approve and authorize functions in frappe/integrations/oauth2.py allow the OAuth2 consent flow to proceed without restricting approve to POST, without a csrftoken in...

8.5CVSS5.4AI score0.00233EPSS
SaveExploits0References9
Cvelist
Cvelist
added 2026/08/20 6:27 p.m.28 views

CVE-2026-66001 Frappe: Improper Authorization in OAuth2 Consent Endpoint

Frappe is a full-stack web application framework. Prior to 15.114.0 and 16.26.0, the approve and authorize functions in frappe/integrations/oauth2.py allow the OAuth2 consent flow to proceed without restricting approve to POST, without a csrftoken in...

8.5CVSS0.00233EPSS
SaveExploits0References9
CVE
CVE
added 2026/08/20 6:27 p.m.20 views

CVE-2026-66001

Frappe , a full-stack web application framework, contains an improper authorization flaw in its OAuth2 consent flow (frappe/integrations/oauth2.py). The approve and authorize functions lacked three critical controls: the approve action was not restricted to POST , the consent template (oauth_conf...

8.5CVSS5.4AI score0.00233EPSS
SaveExploits0References9
NVD
NVD
added 2026/08/15 4:18 a.m.16 views

CVE-2026-13360

The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regionArray' parameter in all versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS0.00247EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/08/15 3:25 a.m.11 views

EUVD-2026-58863

The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regionArray' parameter in all versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS5.5AI score0.00247EPSS
SaveExploits0References8
Rows per page
Query Builder