Lucene search
+L

2554608 matches found

GithubExploit
GithubExploit
added 2026/08/21 6:22 p.m.20 views

Exploit for Improper Authentication in Apple Macos

CVE-2026-65400 — macOS Screen Sharing pre-auth root file read...

9.8CVSS9.3AI score0.00751EPSS
SaveExploits2
NVD
NVD
added 2026/08/21 6:16 p.m.10 views

CVE-2026-77234

Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. To remediate this issue, users should upgrade to version 11.3.1 or later...

9.3CVSS0.00114EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/21 6:16 p.m.12 views

CVE-2026-62675

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, multipart POST /v1/sessions accepts an authenticated user's agent bundle and omnigent/server/bundles.py validateagentbundle does not reject a tools..callable dotted Python path...

8.8CVSS0.00448EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/21 6:16 p.m.6 views

CVE-2026-41450

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the commandcollector function where foreach command output lines are substituted directly into command strings via sed without proper escaping before being evaluated with eval. Attackers can...

8.5CVSS0.00698EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/21 6:16 p.m.8 views

CVE-2026-41451

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the user substitution logic within parseartifact.sh where usernames and home directories from /etc/passwd are substituted directly into command strings without escaping before execution via eval...

8.5CVSS0.00719EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/21 6:16 p.m.6 views

CVE-2026-41449

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the runcommand function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can...

8.5CVSS0.0064EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/21 6:16 p.m.7 views

CVE-2026-17250

A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadata within a firmware image. Successful exploitation may allow an authenticated attacker to trigger memory corruption and execute arbitrary...

8.5CVSS0.00192EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/21 5:57 p.m.10 views

CVE-2026-74582

A flaw was found in the Linux kernel's packet handling functions, specifically packetsnd and packetsendmsgspkt. This vulnerability arises from inconsistent handling of network device header lengths during packet construction. A local attacker could exploit this by triggering a race condition duri...

7CVSS5.7AI score0.00156EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/21 5:57 p.m.6 views

CVE-2026-66786

A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition CRD without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This...

9.1CVSS6.8AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/21 5:52 p.m.23 views

CVE-2026-71493 Infracost: Arbitrary file read via config-template readFile symlink traversal

Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, the readFile, pathExists, isDir, and matchPaths template functions in internal/config/template/parser.go use a lexical filepath.Rel check and a leaf-only os.Lstat check that do not resolve an...

5.9CVSS0.00426EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/21 5:52 p.m.7 views

CVE-2026-71493 Infracost: Arbitrary file read via config-template readFile symlink traversal

Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, the readFile, pathExists, isDir, and matchPaths template functions in internal/config/template/parser.go use a lexical filepath.Rel check and a leaf-only os.Lstat check that do not resolve an...

5.9CVSS5.5AI score
SaveExploits0References6
EUVD
EUVD
added 2026/08/21 5:49 p.m.11 views

EUVD-2026-64018

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, multipart POST /v1/sessions accepts an authenticated user's agent bundle and omnigent/server/bundles.py validateagentbundle does not reject a tools..callable dotted Python path...

8.8CVSS5.5AI score0.00448EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/21 5:49 p.m.19 views

CVE-2026-62675

Omnigent , an open-source AI agent framework, is vulnerable to authenticated remote code execution prior to version 0.3.0. The root cause is that validate_agent_bundle in omnigent/server/bundles.py does not reject a tools..callable dotted Python path. When a malicious agent bundle is uploaded via...

8.8CVSS5.4AI score0.00448EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/21 5:49 p.m.7 views

CVE-2026-62675 Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, multipart POST /v1/sessions accepts an authenticated user's agent bundle and omnigent/server/bundles.py validateagentbundle does not reject a tools..callable dotted Python path...

8.8CVSS5.5AI score0.00448EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/21 5:49 p.m.24 views

CVE-2026-62675 Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, multipart POST /v1/sessions accepts an authenticated user's agent bundle and omnigent/server/bundles.py validateagentbundle does not reject a tools..callable dotted Python path...

8.8CVSS0.00448EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/21 5:49 p.m.15 views

CVE-2026-62675 Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, multipart POST /v1/sessions accepts an authenticated user's agent bundle and omnigent/server/bundles.py validateagentbundle does not reject a tools..callable dotted Python path...

8.8CVSS5.7AI score
SaveExploits0References6
Wordfence Blog
Wordfence Blog
added 2026/08/21 5:45 p.m.11 views

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 10, 2026 to August 16, 2026)

Last week, there were 259 vulnerabilities disclosed in 199 WordPress Plugins and 5 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 142 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

7.4AI score
SaveExploits0
Cvelist
Cvelist
added 2026/08/21 5:44 p.m.27 views

CVE-2026-62677 Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing osenv.cwd value because omnigent/spec/parser.py stores the value verbatim and...

8.8CVSS0.00446EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/21 5:44 p.m.8 views

CVE-2026-62677 Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing osenv.cwd value because omnigent/spec/parser.py stores the value verbatim and...

8.8CVSS5.5AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/08/21 5:44 p.m.8 views

CVE-2026-62677 Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, an authenticated user can upload a session-scoped agent bundle with an absolute or traversal-containing osenv.cwd value because omnigent/spec/parser.py stores the value verbatim and...

8.8CVSS5.3AI score0.00446EPSS
SaveExploits0References4
Rows per page
Query Builder