Lucene search
+L

6190 matches found

Github Security Blog
Github Security Blog
•added 2026/01/02 3:30 p.m.•26 views

Duplicate Advisory: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-528q-4pgm-wvg2. This link is maintained to preserve external references. Original Description A cross-site scripting XSS vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scrip...

6.1CVSS6.3AI score0.00267EPSS
SaveExploits0References4Affected Software2
osv_ghsa
osv_ghsa
•added 2026/01/02 3:30 p.m.•19 views

GHSA-P4F6-H8JJ-VFVF Duplicate Advisory: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-528q-4pgm-wvg2. This link is maintained to preserve external references. Original Description A cross-site scripting XSS vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scrip...

5.3CVSS5.7AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/01/02 3:19 p.m.•19 views

EUVD-2026-0666

A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qfiling 3.13.1 and later...

9.3CVSS6.3AI score0.0052EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/02 2:56 p.m.•35 views

EUVD-2026-0683

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following versions: QTS...

6.9CVSS6.4AI score0.00339EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/02 7:02 a.m.•31 views

EUVD-2026-0700

A vulnerability was detected in Yonyou KSOA 9.0. Affected is an unknown function of the file /kp/PrintZPYG.jsp. The manipulation of the argument zpjhid results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early...

7.5CVSS7.2AI score0.00401EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/01/01 4:26 p.m.•31 views

CVE-2025-62122

Missing Authorization vulnerability in solwininfotech Trash Duplicate and 301 Redirect trash-duplicate-and-301-redirect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trash Duplicate and 301 Redirect: from n/a through = 1.9.1...

5.3CVSS5.9AI score0.00267EPSS
SaveExploits0References1
SQLite
SQLite
•added 2026/01/01 12:00 a.m.•26 views

SQLite report about CVE-2026-11824

This appears to be a duplicate of CVE-2026-11822...

8.5CVSS7.5AI score0.00176EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•23 views

PT-2026-7995

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, The fix for CVE-2023-33968 is incomplete. The TaskCreationController::duplicateProjects endpoint does not validate user permissions for target projects, allowing authenticated users to duplicate tasks into...

5.4CVSS6.1AI score0.0039EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•26 views

PT-2026-8122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw where duplicate registrations of pins were permitted. Specifically, the dpll xa ref dpll add and dpll xa ref pin add functions allowed multiple...

5.5CVSS6.5AI score0.00134EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•24 views

PT-2026-5533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the rockchip usb2phy probe function related to a double free issue. The issue occurs due to multiple calls to of node put which releases node...

7.7CVSS7.5AI score0.00246EPSS
SaveExploits0
NVD
NVD
•added 2025/12/31 4:15 p.m.•37 views

CVE-2025-62122

Missing Authorization vulnerability in solwininfotech Trash Duplicate and 301 Redirect trash-duplicate-and-301-redirect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trash Duplicate and 301 Redirect: from n/a through = 1.9.1...

5.3CVSS0.00267EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 3:38 p.m.•26 views

EUVD-2025-206004

Missing Authorization vulnerability in Solwininfotech Trash Duplicate and 301 Redirect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trash Duplicate and 301 Redirect: from n/a through 1.9.1...

5.3CVSS6.5AI score0.00267EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/31 3:38 p.m.•36 views

CVE-2025-62122

CVE-2025-62122 : Missing Authorization in the Trash Duplicate and 301 Redirect WordPress plugin. Affected: Trash Duplicate and 301 Redirect, versions up to 1.9.1 (inclusive). Public references indicate a missing-access-control issue; no exploit details or mitigation are provided in the supplied d...

5.3CVSS6AI score0.00267EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/31 3:38 p.m.•10 views

CVE-2025-62122 WordPress Trash Duplicate and 301 Redirect plugin <= 1.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Solwininfotech Trash Duplicate and 301 Redirect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trash Duplicate and 301 Redirect: from n/a through 1.9.1...

5.3CVSS6AI score0.00267EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 3:38 p.m.•48 views

CVE-2025-62122 WordPress Trash Duplicate and 301 Redirect plugin <= 1.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in solwininfotech Trash Duplicate and 301 Redirect trash-duplicate-and-301-redirect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trash Duplicate and 301 Redirect: from n/a through = 1.9.1...

5.3CVSS0.00267EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/31 3:28 p.m.•27 views

WordPress Trash Duplicate and 301 Redirect plugin <= 1.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Trash Duplicate and 301 Redirect versions = 1.9.1...

5.3CVSS6.8AI score0.00267EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/31 1:53 p.m.•25 views

CVE-2023-54170

In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assocarray When making a DNS query inside the kernel using dnsquery, the request code can in rare cases end up creating a duplicate index key in the assocarray of the destination...

5.5CVSS6AI score0.00205EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/12/31 12:29 a.m.•13 views

SUSE CVE-2023-54170

In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assocarray When making a DNS query inside the kernel using dnsquery, the request code can in rare cases end up creating a duplicate index key in the assocarray of the destination...

5.5CVSS5.9AI score0.00205EPSS
SaveExploits0References24
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•8 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992960)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992960 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix duplicated reported IWCMEVENTCONNECTREPLY event If siwrecvmparr returns -EAGAIN, it...

7.5CVSS6AI score0.00608EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•8 views

CVE-2025-62122: Missing Authorization

Missing Authorization vulnerability in solwininfotech Trash Duplicate and 301 Redirect trash-duplicate-and-301-redirect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trash Duplicate and 301 Redirect: from n/a through = 1.9.1...

5.3CVSS6AI score0.00267EPSS
SaveExploits0References2
Rows per page
Query Builder