231710 matches found
Root-My-Device-Payloads
Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...
Exploit for CVE-2026-64600
No d...
CVE-2026-16585
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesticker function in all versions up to, and including, 2.15.19. This makes it possible for authenticate...
Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware
SELinux-Permissive-Only-version-of-Cheese-aka...
Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware
SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479 T...
Exploit for Improper Authorization in Microsoft
No d...
CVE-2026-51274
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
PT-2026-65617
Name of the Vulnerable Software and Affected Versions datamodel-code-generator versions 0.11.6 through 0.63.0 Description A flaw in the handling of schema extensions allows for remote code execution on the machine that imports the generated model. When processing a malicious OpenAPI or JSON Schem...
Linux Distros Unpatched Vulnerability : CVE-2026-51304
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqlite 3.41 has a use-after-free UAF vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object via...
Exploit for Interpretation Conflict in Wordpress
wp2shell-hestia-scanner Read-only WordPress security scanner...
Exploit for Deserialization of Untrusted Data in Pdfminer Pdfminer.Six
No d...
Incorrect Authorization
Overview AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Incorrect Authorization via the req.functool argument in the astrmainagent.py process. An attacker can gain unauthorized access to restricted functionality and perform actions with elevated privileges...
Incorrect Authorization
Overview AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Incorrect Authorization via the function buildhandofftoolset in the file AstrBot/astrbot/core/astragenttoolexec.py of the component Subagent. The manipulation results in incorrect authorization. The...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499-pgp110 CVE-2026-43499 futex PI rtmutex...
CVE-2026-51296
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-17529
A vulnerability was identified in AstrBotDevs AstrBot up to 4.25.5. Affected is an unknown function of the file astrbot/core/astrmainagent.py. The manipulation of the argument req.functool leads to incorrect authorization. The attack may be initiated remotely. The exploit is publicly available an...
CVE-2026-17530
A security flaw has been discovered in AstrBotDevs AstrBot up to 4.25.5. Affected by this vulnerability is the function buildhandofftoolset of the file AstrBot/astrbot/core/astragenttoolexec.py of the component Subagent. The manipulation results in incorrect authorization. The attack may be...
CVE-2026-17531 unitedbyai droidclaw Unsigned Scheduled Callback goals.ts authorization
A weakness has been identified in unitedbyai droidclaw up to 0.5.3. Affected by this issue is some unknown functionality of the file server/src/routes/goals.ts of the component Unsigned Scheduled Callback. This manipulation causes authorization bypass. Remote exploitation of the attack is possibl...
CVE-2026-17531
A weakness has been identified in unitedbyai droidclaw up to 0.5.3. Affected by this issue is some unknown functionality of the file server/src/routes/goals.ts of the component Unsigned Scheduled Callback. This manipulation causes authorization bypass. Remote exploitation of the attack is possibl...