Lucene search
+L

8186 matches found

Snyk
Snyk
•added 2026/07/19 7:51 a.m.•17 views

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the views.py process of the Dashboard Module. An attacker can gain unauthorized access to restricted dashboard functionalities by sending crafted requests to endpoints without proper...

6.5CVSS6.5AI score0.00384EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/18 8:36 p.m.•12 views

CVE-2026-12228 Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms

A stored cross-site scripting XSS vulnerability exists in the POST /api/prompts/share endpoint of parisneo/lollms latest version. The endpoint stores attacker-controlled promptcontent into DBDirectMessage.content without server-side sanitization. When a victim opens the direct message DM thread,...

8.7CVSS7.8AI score0.00334EPSS
SaveExploits1References1
Veracode
Veracode
•added 2026/07/18 11:55 a.m.•16 views

Server-Side Request Forgery (SSRF)

ToolHive is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the authentication discovery process issuing outbound HTTP requests to attacker-controlled URLs without validating private IPs, loopback addresses, or redirects, which allows a malicious remote MCP server to...

7.9AI score0.00429EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/07/17 8:17 p.m.•19 views

CVE-2026-7667

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content-Disposition header e.g., filename="../../../target/path" , enabling arbitrary file write operations with...

8.8CVSS0.0056EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/17 8:17 p.m.•17 views

CVE-2026-46420

setup-php is a GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and tools. From 2.25.0 prior to 2.37.1, shivammathur/setup-php resolves the PHP version from repository-controlled files such as .php-version, composer.lock through platform-overrides.php, and...

9.8CVSS0.0201EPSS
SaveExploits1References3
OSV
OSV
•added 2026/07/17 8:17 p.m.•14 views

DEBIAN-CVE-2026-16118

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

7.1CVSS5.6AI score0.00267EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/17 7:51 p.m.•16 views

EUVD-2026-45303

setup-php is a GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and tools. From 2.25.0 prior to 2.37.1, shivammathur/setup-php resolves the PHP version from repository-controlled files such as .php-version, composer.lock through platform-overrides.php, and...

5.6CVSS5.4AI score0.0201EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/07/17 7:51 p.m.•15 views

CVE-2026-46420

setup-php is a GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and tools. From 2.25.0 prior to 2.37.1, shivammathur/setup-php resolves the PHP version from repository-controlled files such as .php-version, composer.lock through platform-overrides.php, and...

5.6CVSS5.5AI score0.0201EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2026/07/17 7:51 p.m.•17 views

CVE-2026-46420 setup-php: Command Injection in Repository-Derived PHP Version Resolution

setup-php is a GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and tools. From 2.25.0 prior to 2.37.1, shivammathur/setup-php resolves the PHP version from repository-controlled files such as .php-version, composer.lock through platform-overrides.php, and...

5.6CVSS5.4AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2026/07/17 7:44 p.m.•17 views

CVE-2026-16118

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

7.1CVSS5.6AI score0.00267EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/17 7:44 p.m.•66 views

CVE-2026-16118 Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

7.1CVSS0.00267EPSS
SaveExploits0References14
RedhatCVE
RedhatCVE
•added 2026/07/17 7:44 p.m.•19 views

CVE-2026-16118

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

7.1CVSS5.6AI score0.00267EPSS
SaveExploits0References4
OSV
OSV
•added 2026/07/17 7:42 p.m.•59 views

GO-2026-5935 netfoil: Attacker controlled data written to logs in github.com/tinfoil-factory/netfoil

netfoil: Attacker controlled data written to logs in github.com/tinfoil-factory/netfoil...

5.3AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/17 7:41 p.m.•55 views

CVE-2026-50151 oras-go: credential forwarding via unvalidated Location header in blob upload

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location header during monolithic blob upload and reuses the Authorization header from the initial POST request for the...

7.5CVSS0.0049EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/07/17 7:39 p.m.•17 views

EUVD-2026-45262

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, resolveWritePath in content/file/file.go uses a lexical filepath.Rel check for workingDir and does not account for symlink traversal, so when AllowPathTraversalOnWrite=false an attacker-controlled blob title through...

6.9CVSS5.2AI score0.00507EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/17 7:21 p.m.•14 views

CVE-2026-7667

IBM Langflow OSS 1.0.0 through 1.10.0 allows an authenticated attacker to create a malicious flow pointing to an attacker-controlled URL that returns a specially crafted Content-Disposition header e.g., filename="../../../target/path" , enabling arbitrary file write operations with...

8.8CVSS5.4AI score0.0056EPSS
SaveExploits0References2Affected Software1
Snyk
Snyk
•added 2026/07/17 6:21 p.m.•16 views

Authorization Bypass Through User-Controlled Key

Overview mcp is a The official Ruby SDK for Model Context Protocol servers and clients Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in lib/mcp/server/transports/streamablehttptransport.rb, which processes tool execution requests to...

8.3CVSS5.8AI score0.0048EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/17 6:17 p.m.•28 views

CVE-2026-48016

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the Store API endpoint /store-api/handle-payment in src/Core/Checkout/Payment/SalesChannel/HandlePaymentMethodRoute.php accepts a user-controlled orderId and forwards it to src/Core/Checkout/Payment/PaymentProcessor.php witho...

4.3CVSS0.00414EPSS
SaveExploits0References5
NVD
NVD
•added 2026/07/17 5:17 p.m.•20 views

CVE-2026-11763

Authorization bypass through User-Controlled key vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System allows Exploitation of Trusted Identifiers. This issue affects GisLab Laboratory Management System: from 1.4.03...

6.5CVSS0.00361EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/17 5:17 p.m.•17 views

CVE-2026-12693

Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0...

9.4CVSS0.00459EPSS
SaveExploits0References1
Rows per page
Query Builder