shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

Cisco Unified Communications Manager 7/8/9 - Directory Traversal

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

cve-search

cve-search cve-search 是一个工具，用于将 CVE（通用漏洞与暴露）和 CPE（通用平台枚举）导入 MongoDB，以方便 CVE 的搜索和处理。 该软件的主要目的是避免直接且公开地查询公共 CVE 数据库。本地查询通常更快，并且您可以限制通过互联网进行敏感查询。 cve-search 包含一个用于存储漏洞及相关信息的后端、一个用于搜索和管理漏洞的直观 Web 界面、一系列查询系统的工具以及一个 Web API 接口。 cve-search 被许多组织使用。CIRCL 的公共 CVE 服务 也曾由 cve-search 提供支持，但此后已被...

T3-Technology-CPE-Advisories

T3 Technology CPE — Avisos de Seguridad Múltiples vulnerabilidades críticas descubiertas en dispositivos CPE ONU/Router T3 Technology desplegados por TrueOnline Tailandia. Vulnerabilidades ID CVE| Severidad| Resumen ---|---|--- CVE-2026-35904| 4.3 Media| Telnet sin autenticación habilitado vía CG...

CVE-2026-2035703-x300

CVE-2026-2035703: Tozed ZLT X300 5G CPE — Ejecución Remota de Código como Root mediante Estación Base Rogue SDR Estado: En divulgación coordinada embargo de 90 días Descubierto: 2026-08-08 Investigador: Muhammad Nadeem Danish danish1162 ID CVE: CVE-2026-2035703 Gravedad: Crítica CVSS 9.8 CWE:...

go-cpe

go-cpe Una librería de Go para CPEA Common Platform Enumeration 2.3 go-cpe es una implementación de los algoritmos de Naming y Matching de CPE, tal como se describen en los NIST IR 7695 y 7696. Para la implementación de referencia en Java, consulte:...

CVE-2026-55637

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCPLISTENADDR value 127.0.0.1:8080 when MCPAUTHTOKEN is unset and the httpSrv.Startaddr branch does not validate th...

CVE-2026-55637 genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCPLISTENADDR value 127.0.0.1:8080 when MCPAUTHTOKEN is unset and the httpSrv.Startaddr branch does not validate th...

CVE-2026-55637 genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCPLISTENADDR value 127.0.0.1:8080 when MCPAUTHTOKEN is unset and the httpSrv.Startaddr branch does not validate th...

CVE-2026-55637

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2 , the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default address 127.0.0.1:8080 when MCP_AUTH_TOKEN is unset, without validating Host or Origin headers. A malicious websit...

PT-2026-81459

Name of the Vulnerable Software and Affected Versions genieacs-mcp versions prior to 0.3.2 Description The Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp endpoint on the default address 127.0.0.1:8080 when the MCP AUTH TOKEN variable is unset. The server fails to...

CVE-2026-62442

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:45+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71062

creationtimestamp| type| source ---|---|--- 2026-08-19 13:35:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwvco7x2l 2026-08-19 16:45:12+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 14:37:06+00:00| seen|...

CVE-2026-71060

CVE-2026-71060 affects Oracle Hyperion Financial Management 11.2.25.0.000 (Security component). A high-privileged remote attacker via HTTP can gain unauthorized access to critical data. CVSS 4.4 MEDIUM. Patch details are not provided in the available documents; consult Oracle's August 2026 CPU ad...

CVE-2026-60759

CVE-2026-60759 affects the Internal Operations component of Oracle Internet Procurement Connector in E-Business Suite versions 12.2.3 through 12.2.15. An unauthenticated, network-based attacker can exploit it to gain unauthorized read and write access to critical procurement data. CVSS 3.1 base s...

CVE-2026-62726

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-Hunter

CVE Hunter Pro A Chrome extension for fast, single-lookup CVE...

CVE-UNASSIGNED-2020-ZYXEL-CPE-COMMAND-INJECTION-RCE-01

creationtimestamp| type| source ---|---|--- 2026-06-30 09:39:37+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7a5b5786-b418-4a38-b09b-03ba93dca08c...