Lucene search
+L

319481 matches found

NVD
NVD
added 2026/09/17 3:16 p.m.2 views

CVE-2026-61793

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

6.9CVSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/17 3:16 p.m.7 views

Undocumented-RCE-in-PLY

Undocumented Remote Code Execution in PLY CVE‑2025‑56005 root@kitploit: CVE ID: CVE‑2025‑56005 Disclosure Date: July 1, 2025 Affected Product: PLY Python Lex‑Yacc Affected Version: 3.11 PyPI distribution Vendor: PLY Python Lex‑Yacc Affected Component: ply/yacc.py — LRTable.readpickle via...

9.8CVSS9.1AI score0.19069EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/17 3:15 p.m.2 views

CVE-2025-32432-exploit-by-P34NUT

CVE-2025-32432 — Craft CMS Pre-Auth RCE Exploit Author: P34NUT2 Vulnerability: Remote Code Execution Pre-Authenticated in Craft CMS CVE: CVE-2025-32432 Target: Any vulnerable Craft CMS instance 3.x / 4.x / 5.x — tested on Hack The Box: Orion ⚠️ Disclaimer This tool is provided strictly for...

10CVSS0.99837EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/17 3:04 p.m.6 views

CVE-2024-57427

CVE-2024-57427 - Reflected Cross-Site Scripting XSS PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting XSS. Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim’s browser. Attackers can craft malicious links to steal...

6.1CVSS8.5AI score0.00445EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/17 3:02 p.m.6 views

CVE-2019-15107

Unauthenticated RCE via Webmin Backdoor CVE-2019–15107 Summary CVE: CVE-2019–15107 Affected Version: Webmin it will open an shell for you . Note: For versions 1.900–1.920, the “expired password changing” feature must be enabled for the backdoor to trigger. Version 1.890 is vulnerable in its defau...

10CVSS8.6AI score0.99766EPSS
SaveExploits39
Kitploit
Kitploit
added 2026/09/17 3:01 p.m.9 views

CVE-2023-2598

CVE-2023-2598 what's iouring? ​ iouring is a system call interface for Linux. It has supported almost all system call so far, not only read and write initially. It enables an application to initiate system calls that can be performed asynchronously. Submission and Completion Queues At the core of...

7.8CVSS7.5AI score0.01371EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/17 2:52 p.m.12 views

CVE-2026-31413-BPF-Container-Escape

CVE-2026-31413: Un Byte en el Verificador BPF para Escape de Contenedor Encontré un bug de solidez en el verificador BPF de Linux: un + 1 en una llamada pushstack que hace que el verificador omita una instrucción ALU en una ruta bifurcada. Para BPFOR, esto significa que el verificador rastrea dst...

7.8CVSS7.1AI score0.00221EPSS
SaveExploits2References6
Github Security Blog
Github Security Blog
added 2026/09/17 2:51 p.m.5 views

Marten's LINQ provider has SQL injection via unescaped string literals

Several code paths in Marten's LINQ provider and tenant-management internals interpolated a runtime, potentially attacker-influenced value into generated SQL as a single-quoted string literal without escaping or parameterization. A value containing a single quote ' could break out of the literal...

9.1CVSS0.00352EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/09/17 2:51 p.m.4 views

GHSA-RFX3-98H7-V3XP Marten's LINQ provider has SQL injection via unescaped string literals

Several code paths in Marten's LINQ provider and tenant-management internals interpolated a runtime, potentially attacker-influenced value into generated SQL as a single-quoted string literal without escaping or parameterization. A value containing a single quote ' could break out of the literal...

9.1CVSS0.00352EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/09/17 2:51 p.m.3 views

LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

Summary A server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect the proxy's outbound request to a host of their choosing by smuggling an apibase inside the userconfig request body, bypassing the existing parameter guard. Details LiteLLM Proxy validates request bodies...

5.3CVSS0.00439EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/09/17 2:51 p.m.3 views

GHSA-HX8V-G79F-8W5F LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

Summary A server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect the proxy's outbound request to a host of their choosing by smuggling an apibase inside the userconfig request body, bypassing the existing parameter guard. Details LiteLLM Proxy validates request bodies...

5.3CVSS0.00439EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/17 2:51 p.m.6 views

EUVD-2026-80986

LiteLLM Proxy has server-side request forgery via the userconfig request parameter...

5.3CVSS0.00439EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/17 2:48 p.m.3 views

GHSA-Q8HW-4FVP-9RWV Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

Summary nuxt-og-image exposes an unauthenticated HTTP endpoint at /og/d/ that base64url-decodes and JSON.parses a fonts URL segment, then passes each fontsi.path value directly into fetch server-side without any URL validation no scheme allowlist, no loopback/RFC1918 block, no host allowlist, no...

6.9CVSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/09/17 2:48 p.m.3 views

Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

Summary nuxt-og-image exposes an unauthenticated HTTP endpoint at /og/d/ that base64url-decodes and JSON.parses a fonts URL segment, then passes each fontsi.path value directly into fetch server-side without any URL validation no scheme allowlist, no loopback/RFC1918 block, no host allowlist, no...

6.9CVSS
SaveExploits0References5Affected Software1
Patchstack
Patchstack
added 2026/09/17 2:48 p.m.3 views

NPM: Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

NPM: Nuxt OG Image has unauthenticated SSRF via fonts.path URL parameter vulnerability discovered by ? in WordPress Npm nuxt-og-image versions = 6.0.2, 6.7.0...

6.9CVSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/09/17 2:48 p.m.3 views

EUVD-2026-81672

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

6.9CVSS
SaveExploits0References4
CVE
CVE
added 2026/09/17 2:48 p.m.8 views

CVE-2026-61793

nuxt-og-image (NPM module for Nuxt.js), versions >= 6.0.2,

6.9CVSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/17 2:48 p.m.14 views

CVE-2026-61793 Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

6.9CVSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/09/17 2:48 p.m.5 views

CVE-2026-61793 Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

6.9CVSS
SaveExploits0References4
OSV
OSV
added 2026/09/17 2:48 p.m.2 views

CVE-2026-61793 Nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter

Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /og/d/ route when the documented defaults security.strict = false and security.secret = "" are used, and base64url-decodes the fonts parameter through decodeOgImageParam...

6.9CVSS
SaveExploits0References6
Rows per page
Query Builder