Lucene search
+L

550036 matches found

GithubExploit
GithubExploit
added 1 hour ago6 views

Exploit for Improper Authentication in Apache Camel

camel-keycloak Fail-Open Authentication Bypass Reproducer CVE...

9.8CVSS5.5AI score0.00619EPSS
Exploits1
GithubExploit
GithubExploit
added 1 hour ago8 views

Epoch-BreachScope

🛡️ BreachScope Hermes BreachScope Hermes is an agentic AI...

5.5AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 1 hour ago40 views

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7AI score0.00412EPSS
Exploits0References11Affected Software9
BDU FSTEC
BDU FSTEC
added 1 hour ago34 views

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS7.2AI score0.00736EPSS
Exploits1References11Affected Software9
BDU FSTEC
BDU FSTEC
added 1 hour ago16 views

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6AI score0.00127EPSS
Exploits0References6Affected Software4
ATTACKERKB
ATTACKERKB
added 3 hours ago2 views

CVE-2026-64606

Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypassed during Java lambda deserialization. Only lambda capture class is affected This issue affects Apache Fory: from before 1.4.0. Users are recommended to upgrade to version 1.4.0, which fixes the...

5.2AI score
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 4 hours ago3 views

CVE-2026-64609

Out-of-bounds read via sun.misc.Unsafe in Apache Fory. When out-of-band zero-copy deserialization is used, readAlignedVarUint can read beyond the bounds of the underlying buffer. Out-of-band zero-copy deserialization is an opt-in feature; applications that do not use it are not affected. This iss...

5.5AI score
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 4 hours ago3 views

CVE-2026-64608

Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compatible mode, the field-skip paths do not correctly validate the declared field types against the actual data, so input with an inconsistent schema can cause type confusion and...

5.3AI score
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 4 hours ago3 views

CVE-2026-62415

The Joomla extension Membership Pro prior version 4.6.2 did by default allow unauthenticated users to upload media assets...

5.3AI score
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 4 hours ago3 views

CVE-2026-15370

A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead ...

6.7CVSS6.1AI score
Exploits0References3
GithubExploit
GithubExploit
added 5 hours ago19 views

Exploit for CVE-2026-6875

cve-id ⚡ Simple Usage Use this project only in safe and...

9.5CVSS5.8AI score0.00509EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 5 hours ago7 views

CVE-2026-1771

The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 This is due to an incorrect conditional check that prevents file validation from taking place. This makes it possible...

7.2CVSS6.4AI score
Exploits0References8
ATTACKERKB
ATTACKERKB
added 5 hours ago5 views

CVE-2026-1372

The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 4.0.0 This is due to missing capability checks on the activatetutorfree and activateelementorfree functions registered as adminaction handlers. This makes it possible f...

4.3CVSS5.3AI score
Exploits0References7
ATTACKERKB
ATTACKERKB
added 5 hours ago4 views

CVE-2026-15145

The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Fancy Text Widget in all versions up to, and including, 6.6.11 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.5AI score
Exploits0References11
ATTACKERKB
ATTACKERKB
added 6 hours ago3 views

CVE-2026-8593

Improper permission enforcement in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 EOL allows users without permissions to view and modify BI packs and rules...

5.3CVSS5.2AI score
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 6 hours ago3 views

CVE-2026-3183

Zohocorp ManageEngine ADSelfService Plus versions before 6524 are vulnerable to Multi Factor Authentication Bypass...

7.1CVSS5.2AI score
Exploits0References2
GithubExploit
GithubExploit
added 7 hours ago15 views

Exploitation-Basics

Exploitation Basics Quick reference for TryHackMe, Hack The...

6.2AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 7 hours ago2 views

CVE-2026-8082

The bpost-shipping-platform WordPress plugin before 3.2.3 does not properly sanitize a parameter before using it in a SQL query during WooCommerce order submission, allowing unauthenticated attackers to perform time-based blind SQL injection on stores running this bpost-shipping-platform WordPres...

5.6AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 7 hours ago3 views

CVE-2026-14185

The WPBot WordPress plugin before 8.2.0 does not perform a capability or nonce check in one of its retrieval-augmented-generation settings handlers, allowing authenticated users with subscriber-level access to modify the WPBot WordPress plugin before 8.2.0's configuration...

5.3AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 7 hours ago3 views

CVE-2026-11767

The Free Builder for Elementor WordPress plugin before 1.6.7 does not sanitise submitted contact form field values before storing them and outputting them in the admin dashboard, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute when a logged-in...

5.3AI score
Exploits0References1
Rows per page
Query Builder