Lucene search
+L

2537737 matches found

The Hacker News
The Hacker News
added yesterday5 views

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. Th...

9.8CVSS6.8AI score
SaveExploits0
Vulnrichment
Vulnrichment
added yesterday4 views

CVE-2026-66147

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests...

9.4AI score
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-56941

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests...

9.4CVSS9.4AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday16 views

CVE-2026-66147

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests...

SaveExploits0References1
CVE
CVE
added yesterday18 views

CVE-2026-66147

CVE-2026-66147 is an unauthenticated command-injection vulnerability in the SonicWall GMS Dispatcher Service for GMS 9.5.1 and earlier. The issue allows an unauthenticated remote attacker to execute commands and achieve remote code execution via specially crafted requests against the Dispatcher S...

9.4CVSS9.4AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday2 views

CVE-2026-66147

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests...

9.4CVSS9.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
added yesterday2 views

CVE-2026-73244 kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrary directory listing

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

5.3CVSS5.4AI score
SaveExploits0References5
Cvelist
Cvelist
added yesterday17 views

CVE-2026-73244 kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrary directory listing

kkFileView is a universal file online preview project based on Spring Boot. Prior to 5.0.1, the unauthenticated POST /listFiles endpoint in server/src/main/java/cn/keking/web/controller/FileController.java passes the user-controlled path parameter from FileControllergetFiles to...

5.3CVSS
SaveExploits0References3
CVE
CVE
added yesterday13 views

CVE-2026-66146

This CVE-2026-66146 entry relates to multiple Cross-Site Scripting (XSS) vulnerabilities in SonicWall GMS 9.5.1 (Build 9510.1044) and earlier. The affected component is GMS (Web UI) and the underlying issue enables a remote attacker to cause a user’s browser to execute injected JavaScript. The So...

6.1CVSS8.7AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added yesterday3 views

CVE-2026-66146

Multiple Cross-Site Scripting XSS vulnerabilities were identified in GMS 9.5.1 Build 9510.1044 and earlier versions that allow a remote attacker to execute javascript script in a user's browser...

8.7AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday16 views

CVE-2026-66146

Multiple Cross-Site Scripting XSS vulnerabilities were identified in GMS 9.5.1 Build 9510.1044 and earlier versions that allow a remote attacker to execute javascript script in a user's browser...

SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-66146

Multiple Cross-Site Scripting XSS vulnerabilities were identified in GMS 9.5.1 Build 9510.1044 and earlier versions that allow a remote attacker to execute javascript script in a user's browser...

6.1CVSS8.7AI score
SaveExploits0References2Affected Software1
EUVD
EUVD
added yesterday7 views

EUVD-2026-56939

Multiple Cross-Site Scripting XSS vulnerabilities were identified in GMS 9.5.1 Build 9510.1044 and earlier versions that allow a remote attacker to execute javascript script in a user's browser...

6.1CVSS8.7AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday19 views

CVE-2026-66145

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 Build 9510.1044 and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip...

SaveExploits0References1
CVE
CVE
added yesterday15 views

CVE-2026-66145

CVE-2026-66145 is an unauthenticated remote code execution vulnerability in SonicWall GMS 9.5.1 (Build 9510.1044) and earlier. The issue allows an attacker to read sensitive data and perform arbitrary file writes via a zip-slip vector, effectively enabling code execution over the network without ...

9.1CVSS9.5AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added yesterday3 views

CVE-2026-66145

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 Build 9510.1044 and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip...

9.4AI score
SaveExploits0References1
EUVD
EUVD
added yesterday7 views

EUVD-2026-56938

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 Build 9510.1044 and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip...

9.1CVSS9.4AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-66145

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 Build 9510.1044 and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip...

9.1CVSS9.4AI score
SaveExploits0References2Affected Software1
GithubExploit
GithubExploit
added yesterday14 views

threat-intel-toolkit

Threat Intel Toolkit A reusable, shareable bundle for defen...

10CVSS5.7AI score0.99999EPSS
SaveExploits45
NCSC
NCSC
added yesterday9 views

vulnerabilities present in Microsoft Office

Microsoft has identified vulnerabilities in various Office products. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause damage as described in the following table. For successful exploitation, the malicious individual must deceive the victim into opening ...

10CVSS6.3AI score0.0091EPSS
SaveExploits0
Rows per page
Query Builder