Lucene search
+L

24638 matches found

Kitploit
Kitploit
added 2026/09/09 8:05 a.m.6 views

CVE-2025-13401-XSS-Stored

Proof of Concept: Stored XSS in Autoptimize tags for images found in the content when image optimization or preloading is enabled. In version 3.1.13, the function uses a "blacklist" approach via pregreplace to remove specific attributes like title, alt, , , , and from the original tag before...

6.4CVSS5.8AI score0.00294EPSS
SaveExploits0
Fedora
Fedora
added 2026/09/09 4:51 a.m.8 views

[SECURITY] Fedora 44 Update: libevent-2.1.13-1.fc44

The libevent API provides a mechanism to execute a callback function when a specific event occurs on a file descriptor or after a timeout has been reached. libevent is meant to replace the asynchronous event loop found in event driven network servers. An application just needs to call eventdispat...

9.2CVSS0.00587EPSS
SaveExploits0
NVD
NVD
added 2026/09/09 4:17 a.m.5 views

CVE-2026-49310

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

8.6CVSS0.0025EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/09 4:17 a.m.5 views

CVE-2026-49311

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

6.2CVSS0.00093EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/09 3:22 a.m.36 views

CVE-2026-49310

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

8.6CVSS0.0025EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/09 3:22 a.m.4 views

EUVD-2026-74597

Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

8.6CVSS0.0025EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/09 3:22 a.m.17 views

CVE-2026-49310

CVE-2026-49310 is a permission control vulnerability in the event notification module affecting Huawei consumer devices , including phones, Vision, wearables, and laptops (per the September 2026 security bulletins). Successful exploitation may affect service confidentiality . The CVSS 3.1 score i...

8.6CVSS0.0025EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/09 3:16 a.m.33 views

CVE-2026-49311

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

6.2CVSS0.00093EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/09 3:16 a.m.5 views

EUVD-2026-74595

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

6.2CVSS0.00093EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/09 3:16 a.m.9 views

CVE-2026-49311

CVE-2026-49311 is a permission control vulnerability in the event notification module affecting Huawei consumer devices (phones, vision/wearables, and laptops). The CVSS 3.1 score is 6.2 (MEDIUM) with a local attack vector , low complexity , no privileges required , and no user interaction needed...

6.2CVSS0.00093EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/09 3:14 a.m.13 views

RDP-Guard

RDP Guard RDP Guard monitors failed RDP sign-in attempts in the Windows Security log and blocks abusive remote IP addresses through Windows Firewall. Defaults Event ID: 4625 LogonType: 3 or 10 Threshold: 3 or more audit failures Check interval: 15 minutes Firewall rule name:...

5.8AI score
SaveExploits0References1
EUVD
EUVD
added 2026/09/09 2:27 a.m.6 views

EUVD-2026-74565

The WP Event Solution Eventin plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the createitem handler for the /wp-json/eventin/v2/orders REST endpoint. The endpoint's createitempermissionscheck function only verifies a wprest nonce which is...

5.3CVSS5.8AI score0.00238EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/09/09 12:30 a.m.7 views

EUVD-2026-74300

An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service DoS. The WinEvents.readELAMAggregation function recurses for every nested elamAggregation sub-event without...

8.7CVSS0.00278EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/09 12:17 a.m.6 views

CVE-2026-19201

An uncontrolled recursion vulnerability in the Windows SIPA event log parser of Google go-attestation versions up to and including 0.6.1 allows an attacker to cause a denial of service DoS. The WinEvents.readELAMAggregation function recurses for every nested elamAggregation sub-event without...

8.7CVSS0.00278EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.7 views

Fedora 44 : libevent (2026-72d10c874d)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-72d10c874d advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...

9.2CVSS0.00587EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/09/09 12:00 a.m.5 views

PT-2026-89179

Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

6.5CVSS0.00305EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2026/09/09 12:00 a.m.6 views

PT-2026-89158

Summary The OIDC back-channel logout endpoint is unauthenticated by design, because the identity provider calls it without a browser session. Before checking whether the submitted logout token was genuine, the handler fetched the provider's discovery document and its signing keys over the network...

7.5CVSS0.00339EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/09/08 9:28 p.m.14 views

EUVD-2026-67932

multer vulnerable to Denial of Service via oversized array index in field names...

7.5CVSS5.9AI score0.00278EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/08 9:19 p.m.7 views

CVE-2026-22015-Serverless-Function-Environment-Variable-Injection-via-Event

CVE-2026-22015 – Serverless Function Environment Variable Injection via Event Program Code Python Lambda sim root@kitploit: lambdaenvinject.py - Vulnerable function that reads env from event import os, json def handlerevent, context: The event contains environment variable overrides debug feature...

4.3CVSS7.7AI score0.00243EPSS
SaveExploits1
CVE
CVE
added 2026/09/08 9:18 p.m.11 views

CVE-2026-86994

n8n , an open-source workflow automation platform, contained a missing userId filter that allowed cross-user information disclosure. The /rest/active-workflows endpoint returned every active workflow ID on the instance to any authenticated member regardless of sharing permissions, and lifecycle p...

5.3CVSS0.00246EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder