Lucene search
+L

4114 matches found

Microsoft Secure
Microsoft Secure
added 2026/03/11 9:00 p.m.40 views

Contagious Interview: Malware delivered through fake developer job interviews

Microsoft Defender Experts has observed the Contagious Interview campaign, a sophisticated social engineering operation active since at least December 2022. Microsoft continues to detect activity associated with this campaign in recent customer environments, targeting software developers at...

6.4AI score
SaveExploits0
NVD
NVD
added 2026/03/11 6:17 a.m.18 views

CVE-2026-2631

The Datalogics Ecommerce Delivery WordPress plugin before 2.6.60 exposes an unauthenticated REST endpoint that allows any remote user to modify the option datalogicstoken without verification. This token is subsequently used for authentication in a protected endpoint that allows users to perform...

9.8CVSS0.0058EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2026/03/11 6:00 a.m.46 views

CVE-2026-2631 Datalogics Ecommerce Delivery < 2.6.60 - Unauthenticated Privilege Escalation

The Datalogics Ecommerce Delivery WordPress plugin before 2.6.60 exposes an unauthenticated REST endpoint that allows any remote user to modify the option datalogicstoken without verification. This token is subsequently used for authentication in a protected endpoint that allows users to perform...

0.0058EPSS
SaveExploits2References1
EUVD
EUVD
added 2026/03/11 6:00 a.m.12 views

EUVD-2026-11098

The Datalogics Ecommerce Delivery WordPress plugin before 2.6.60 exposes an unauthenticated REST endpoint that allows any remote user to modify the option datalogicstoken without verification. This token is subsequently used for authentication in a protected endpoint that allows users to perform...

5.9AI score0.0058EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2026/03/11 6:00 a.m.8 views

CVE-2026-2631 Datalogics Ecommerce Delivery < 2.6.60 - Unauthenticated Privilege Escalation

The Datalogics Ecommerce Delivery WordPress plugin before 2.6.60 exposes an unauthenticated REST endpoint that allows any remote user to modify the option datalogicstoken without verification. This token is subsequently used for authentication in a protected endpoint that allows users to perform...

5.9AI score0.0058EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2026/03/11 12:00 a.m.17 views

WordPress plugin Datalogics Ecommerce Delivery 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

9.8CVSS5.8AI score0.0058EPSS
SaveExploits2References1
Wired Threat Level
Wired Threat Level
added 2026/03/10 3:22 p.m.19 views

GPS Attacks Near Iran Are Wreaking Havoc on Delivery and Mapping Apps

Delivery apps are glitching and navigation routes are changing abruptly thanks to electronic warfare disrupting the satellite signals that power everything from missiles to your ride home...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/03/10 5:49 a.m.239 views

Exploit for Type Confusion in Apple Ipados

🏴‍☠️ Coruna iOS Exploit Kit: CVE-2024-23222 Research !CVEh...

8.8CVSS6AI score0.10593EPSS
SaveExploits6
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/09 8:03 p.m.11 views

Malicious code in hxq-misc-utils-0379 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 1e22088fbe314143f0c3eb971a645a125a9a32753184ceb5abd533ac7e60da69 This package includes an encrypted payload file that appears to be used to deliver code or resources to other packages. The payload changes betwe...

5.8AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2026/03/09 12:00 a.m.17 views

VulnCheck KEV: CVE-2019-5434

An attacker could send a specifically crafted payload to the XML-RPC invocation script and trigger the unserialize call on the "what" parameter in the "openads.spc" RPC method. Such vulnerability could be used to perform various types of attacks, e.g. exploit serialize-related PHP vulnerabilities...

9.8CVSS5.8AI score0.57022EPSS
SaveIn wildExploits7References27
Hacker One
Hacker One
added 2026/03/06 12:52 p.m.22 views

Enjin: Unauthenticated File Upload to CDN

An unauthenticated file upload vulnerability was discovered in the NFT.io platform. The vulnerability allowed an unauthenticated user to upload files to the platform's content delivery network. The issue was reported and promptly fixed by the Enjin team, despite the low-impact nature of the...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/03/05 7:31 p.m.13 views

CVE-2026-23601

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of...

5.4CVSS5.8AI score0.00084EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/04 4:07 p.m.8 views

CVE-2026-23601

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can generate shared-key authenticated transmissions containing targeted payloads while impersonating the identity of a primary BSSID.Successful exploitation allows for the delivery of...

5.4CVSS5.8AI score0.00084EPSS
SaveExploits0References2Affected Software1
Malwarebytes
Malwarebytes
added 2026/03/04 12:53 p.m.15 views

Attackers abuse OAuth’s built-in redirects to launch phishing and malware attacks

Attackers are abusing normal OAuth error redirects to send users from a legitimate Microsoft or Google login URL to phishing or malware pages, without ever completing a successful sign‑in or stealing tokens from the OAuth flow itself. That calls for a bit more explanation. OAuth Open Authorizatio...

6AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/03/04 12:00 a.m.21 views

PT-2026-22941

Name of the Vulnerable Software and Affected Versions Wi-Fi affected versions not specified Description A security issue exists in how Wi-Fi handles wireless encryption during transmissions. An attacker can create specially crafted, authenticated transmissions that appear to come from a trusted...

5.4CVSS5.8AI score0.00084EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/03/03 6:11 p.m.23 views

Temporary path handling could write outside OpenClaw temp boundary

Summary Sandbox media local-path validation accepted absolute paths under host tmp, even when those paths were outside the active sandbox root. Affected Packages / Versions - Package: openclaw npm - Latest published version verified during triage: 2026.2.23 - Affected versions: = 2026.2.24 Detail...

8.6CVSS6AI score0.00344EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/03 12:00 a.m.19 views

PT-2026-26407

Summary Sandbox media local-path validation accepted absolute paths under host tmp, even when those paths were outside the active sandbox root. Affected Packages / Versions - Package: openclaw npm - Latest published version verified during triage: 2026.2.23 - Affected versions: = 2026.2.24 Detail...

7.1CVSS5.9AI score0.00344EPSS
SaveExploits0References9
Microsoft Secure
Microsoft Secure
added 2026/03/02 7:29 p.m.38 views

OAuth redirection abuse enables phishing and malware delivery

Microsoft observed phishing-led exploitation of OAuth’s by-design redirection mechanisms. The activity targets government and public-sector organizations and uses silent OAuth authentication flows and intentionally invalid scopes to redirect victims to attacker-controlled infrastructure without...

6.2AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/02 12:23 p.m.10 views

Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands are vulnerable to loss of confidentiality (CVE-2026-25536)

Summary MCP TypeScript SDK is used by IBM App Connect Enterprise Certified Container. IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands are vulnerable to loss of confidentiality. This bulletin provides patch information to address the reported...

7.1CVSS5.8AI score0.00277EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/02 12:21 p.m.10 views

Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that report metrics are vulnerable to loss of confidentiality (CVE-2025-13490)

Summary When an IBM App Connect Enterprise Certified Container IntegrationRuntime or IntegrationServer is configured to report metrics to a Prometheus instance in the OpenShift cluster, the metrics are sent over an unencrypted channel. This bulletin provides patch information to address the...

5.9CVSS5.9AI score0.00186EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder