Lucene search
+L

43711 matches found

EUVD
EUVD
added yesterday6 views

EUVD-2026-54893

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public REST endpoint actions, allowing unauthenticated users to delete the generated album export ZIP archives it stores...

5.3AI score0.00145EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-54892

The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing...

5.4AI score0.00097EPSS
SaveExploits0References1
CVE
CVE
added yesterday20 views

CVE-2026-17014

The CVE concerns the WP Photo Album Plus WordPress plugin (pre-9.2.07.002). The vulnerability is an unauthenticated access issue in a public REST endpoint action that does not perform capability or nonce checks, allowing an attacker to delete the generated album export ZIP archives stored by the ...

5.3AI score0.00145EPSS
SaveExploits0References1
CVE
CVE
added yesterday19 views

CVE-2026-16988

The issue affects the GeoDirectory WordPress plugin prior to version 2.8.169. The REST endpoint used to fetch map marker data for a single listing does not perform authorization checks, enabling unauthenticated users to learn the title and exact geographic coordinates of non-public (pending or dr...

5.2AI score0.00145EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago52 views

CVE-2026-67620

CVE-2026-67620 affects Flowise up to version 3.1.4, where the SSRF guard in httpSecurity.ts uses a faulty DEFAULT_DENY_LIST. The list blocks the AWS/GCP/Azure/DO metadata IPs 169.254.169.254 but omits OCI 192.0.0.192 and Alibaba Cloud 100.100.100.200 (and the 100.64.0.0/10 CGNAT range). An authen...

7.7CVSS5.5AI score0.00426EPSS
SaveExploits1References3
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-54793

Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULTDENYLIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200, allowing authenticate...

7.7CVSS5.5AI score0.00426EPSS
SaveExploits1References3
OSV
OSV
added 2 days ago4 views

CVE-2026-19284 MauricioMilano coder-api Projects Endpoint projects.ts createProject command injection

A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...

4.8CVSS5AI score
SaveExploits0References8
Nuclei
Nuclei
added 2 days ago22 views

LoLLMs WEBUI - Server-Side Request Forgery

LoLLMs WEBUI contains a server-side request forgery caused by unauthenticated access to the /api/proxy endpoint, letting attackers force the server to make arbitrary GET requests, exploit requires no authentication. id: CVE-2026-33340 info: name: LoLLMs WEBUI - Server-Side Request Forgery author:...

9.1CVSS5.4AI score0.21629EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2 days ago49 views

ZenML ZenML Server - Improper Authentication

ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. id: CVE-2024-25723 info:...

8.8CVSS7.1AI score0.70581EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2 days ago93 views

AnythingLLM - Information Disclosure

AnythingLLM suffers from an information disclosure vulnerability through the /api/setup-complete API endpoint. By accessing this endpoint, a remote and unauthenticated attacker can access sensitive configuration of the target AnythingLLM instance. This detection is included in the AI and LLM...

7.5CVSS7.4AI score0.30562EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2 days ago100 views

NETGEAR ProSAFE Plus - Unauthenticated Remote Code Execution

NETGEAR ProSAFE Plus before 2.6.0.43 is susceptible to unauthenticated remote code execution. Any HTML page is allowed as a valid endpoint to submit POST requests, allowing debug action via the submitId and debugCmd parameters. The problem is publicly exposed in the login.html webpage, which has ...

9.8CVSS9.4AI score0.57195EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2 days ago47 views

LiteLLM - Arbitrary File Read

LiteLLM 1.83.0 contains a broken access control vulnerability caused by lack of admin role enforcement on /config/update endpoint, letting authenticated users modify configurations, execute code, read files, and take over accounts. id: CVE-2026-35029 info: name: LiteLLM - Arbitrary File Read...

8.8CVSS5.3AI score0.26409EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2 days ago85 views

MCPJam Inspector - Remote Code Execution

MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. id:...

9.8CVSS6.3AI score0.45026EPSS
SaveExploits36References3
Nuclei
Nuclei
added 2 days ago45 views

Nginx UI < 2.3.3 - Information Disclosure

Nginx UI 2.3.3 contains an information disclosure vulnerability caused by unauthenticated access to /api/backup endpoint exposing encryption keys in X-Backup-Security header, letting unauthenticated attackers download and decrypt full system backups. id: CVE-2026-27944 info: name: Nginx UI 2.3.3 ...

9.8CVSS7.9AI score0.22162EPSS
SaveExploits13References3
ATTACKERKB
ATTACKERKB
added 2 days ago9 views

CVE-2026-19268

A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/claude-usage.ts of the component Claude Usage Range Endpoint. The manipulation of the argument since leads to command...

6.5CVSS6.3AI score0.01067EPSS
SaveExploits0References6
EUVD
EUVD
added 2 days ago15 views

EUVD-2026-54766

A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted element is an unknown function of the file mcp-bridge.js of the component Servers Endpoint. Performing a manipulation of the argument command/args results in command injection. It i...

7.5CVSS7.1AI score0.01336EPSS
SaveExploits0References7
CVE
CVE
added 2 days ago41 views

CVE-2026-19263

INQUIRELAB mcp-bridge-api (up to b30a82aa1d1d1139e0de846c41c8aadee6e06114), specifically the Servers Endpoint component mcp-bridge.js, is affected by a command injection vulnerability triggered by manipulating the command/args argument. The issue allows remote initiation. The product uses a rolli...

7.5CVSS7.1AI score0.01336EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2 days ago7 views

CVE-2026-19263

A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted element is an unknown function of the file mcp-bridge.js of the component Servers Endpoint. Performing a manipulation of the argument command/args results in command injection. It i...

7.5CVSS7.1AI score0.01336EPSS
SaveExploits0References8
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-54736

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor before granting download permissions through one of its order REST endpoints, allowing an authenticated vendor to grant...

5.2AI score0.00132EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago25 views

CVE-2026-16574

CVE-2026-16574 affects the Dokan WordPress plugin (AI Powered WooCommerce Multivendor Marketplace Solution) prior to version 5.0.11. The root cause is a missing verification that a downloadable product belongs to the requesting vendor before granting download permissions via an order REST endpoin...

5.2AI score0.00132EPSS
SaveExploits0References1
Rows per page
Query Builder