cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

cve-search

cve-search cve-search — это инструмент для импорта CVE Common Vulnerabilities and Exposures и CPE Common Platform Enumeration в MongoDB, чтобы облегчить поиск и обработку CVE. Основная цель программы — избегать прямых и публичных обращений к общедоступным базам CVE. Локальные запросы обычно...

go-cpe

go-cpe Una libreria Go per CPE Common Platform Enumeration 2.3 go-cpe è un'implementazione degli algoritmi di Naming e Matching del CPE, come descritto nei NIST IR 7695 e 7696. Per l'implementazione Java di riferimento, vedi:...

CVE-2026-55637

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCPLISTENADDR value 127.0.0.1:8080 when MCPAUTHTOKEN is unset and the httpSrv.Startaddr branch does not validate th...

CVE-2026-55637 genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default MCPLISTENADDR value 127.0.0.1:8080 when MCPAUTHTOKEN is unset and the httpSrv.Startaddr branch does not validate th...

CVE-2026-55637

genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2 , the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on the default address 127.0.0.1:8080 when MCP_AUTH_TOKEN is unset, without validating Host or Origin headers. A malicious websit...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

Cisco Unified Communications Manager 7/8/9 - Directory Traversal

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

T3-Technology-CPE-Advisories

T3 Technology CPE — Avvisi di Sicurezza Scoperte multiple vulnerabilità critiche nei dispositivi T3 Technology CPE ONU/Router distribuiti da TrueOnline Thailandia. Vulnerabilità CVE ID| Gravità| Sommario ---|---|--- CVE-2026-35904| 4.3 Medio| Abilitazione Telnet non autenticata tramite CGI...

CVE-2026-62442

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:45+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71062

creationtimestamp| type| source ---|---|--- 2026-08-19 13:35:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwvco7x2l 2026-08-19 16:45:12+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 14:37:06+00:00| seen|...

CVE-2026-71060

CVE-2026-71060 affects Oracle Hyperion Financial Management 11.2.25.0.000 (Security component). A high-privileged remote attacker via HTTP can gain unauthorized access to critical data. CVSS 4.4 MEDIUM. Patch details are not provided in the available documents; consult Oracle's August 2026 CPU ad...

CVE-2026-60759

CVE-2026-60759 affects the Internal Operations component of Oracle Internet Procurement Connector in E-Business Suite versions 12.2.3 through 12.2.15. An unauthenticated, network-based attacker can exploit it to gain unauthorized read and write access to critical procurement data. CVSS 3.1 base s...

CVE-2026-62726

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-UNASSIGNED-2020-ZYXEL-CPE-COMMAND-INJECTION-RCE-01

creationtimestamp| type| source ---|---|--- 2026-06-30 09:39:37+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7a5b5786-b418-4a38-b09b-03ba93dca08c...

Pulse Connect Secure SSL VPN Arbitrary File Read

Pulse Secure Pulse Connect Secure PCS 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 all contain an arbitrary file reading vulnerability that could allow unauthenticated remote attackers to send a specially crafted URI to gain improper access. id: CVE-2019-11510 info: name: Pulse...

openSUSE 16 Security Update : syft (openSUSE-SU-2026:20928-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20928-1 advisory. Changes in syft: - Update to version 1.45.0: Added Features - Add support for ZapAddOns as jar files 4654 4932 @douglasclarke - MySQL binary classifier...

CVE-2026-35905

T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root access under the "superadmin" account...

CVE-2026-35904

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 allows unauthorized attackers to enable the Telnet service via sending a crafted request to a vulnerable CGI component...