Lucene search
+L

232312 matches found

Positive Technologies
Positive Technologies
•added 2026/07/12 12:00 a.m.•31 views

PT-2026-57523

A flaw has been found in IceHRM up to 35.0.1. This impacts an unknown function of the file core/src/Reports/User/Reports/EmployeeAttendanceReport.php of the component UserReport Endpoint. Executing a manipulation of the argument employeeList can lead to sql injection. The attack can be launched...

6.5CVSS5.9AI score0.00316EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/12 12:00 a.m.•42 views

PT-2026-57580

A weakness has been identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. This vulnerability affects the function RPCService.query of the file /customizemt/xkq/rpc.jsp of the component PHPRPC Remote Call Interface. Executing a manipulation of the argument phprpc args can lead to sql injection...

7.5CVSS6.7AI score0.00411EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/12 12:00 a.m.•35 views

PT-2026-57575

A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build target url of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extracted path and query can lead to server-side request...

6.5CVSS6.3AI score0.00347EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/07/12 12:00 a.m.•37 views

PT-2026-57535

A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by this issue is some unknown functionality of the file proses/add.php. The manipulation of the argument kode produk/kd cs results in sql injection. The attack can be executed...

7.5CVSS6.7AI score0.00411EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/12 12:00 a.m.•40 views

PT-2026-57541

A vulnerability was found in SonicCloudOrg sonic-agent up to 2.7.2. The impacted element is the function evalIsFailed of the file sonic-agent/src/main/java/org/cloud/sonic/agent/tests/script/GroovyScriptImpl.java of the component Groovy Script Handler. The manipulation results in os command...

6.5CVSS6.3AI score0.01986EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/07/11 11:45 p.m.•14 views

CVE-2026-15470

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may...

5.3CVSS5.7AI score0.00348EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/07/11 11:45 p.m.•56 views

CVE-2026-15470 Eleveo Call Recording Software group.jsp improper authorization

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may...

5.3CVSS0.00348EPSS
SaveExploits0References5
CVE
CVE
•added 2026/07/11 11:45 p.m.•33 views

CVE-2026-15470

Technical details (affected product, versions, root cause, exploit specifics) are not publicly provided in the supplied documents. Monitor for updates.

5.3CVSS5.2AI score0.00348EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/07/11 11:45 p.m.•10 views

CVE-2026-15470 Eleveo Call Recording Software group.jsp improper authorization

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may...

5.3CVSS5.2AI score0.00348EPSS
SaveExploits0References5
GithubExploit
GithubExploit
•added 2026/07/11 6:27 p.m.•111 views

cve-vulnerability-trend-analyzer

No d...

6.1AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/07/11 4:29 p.m.•110 views

a2tools

No d...

6.1AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/07/11 1:27 p.m.•118 views

Exploit for CVE-2026-0740

CVE-2026-0740 — Mass-Target Exploit Engine Author: 0xNuts...

9.8CVSS8.1AI score0.62903EPSS
SaveExploits9
GithubExploit
GithubExploit
•added 2026/07/11 12:58 p.m.•231 views

tetragon-lab

How it works This poc use copyfail exploit to overwrite page-...

7.8CVSS7AI score0.03437EPSS
SaveExploits246
GithubExploit
GithubExploit
•added 2026/07/11 10:24 a.m.•139 views

Exploit for CVE-2026-15282

No d...

9.8CVSS6.1AI score0.01079EPSS
SaveExploits1
GithubExploit
GithubExploit
•added 2026/07/11 7:17 a.m.•124 views

vulnerability-scanner

vulnerabilit...

6.1AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/07/11 6:42 a.m.•135 views

Exploit for Integer Overflow or Wraparound in Linux Linux_Kernel

PACKETEDITMEME - CVE-2026-46331 net/sched actpedit parti...

7.8CVSS6.8AI score0.00583EPSS
SaveExploits15
GithubExploit
GithubExploit
•added 2026/07/11 4:05 a.m.•108 views

exploit-claim-investigation-dashboard

Exploit Claim Investigation Dashboard An interactive, single-...

6.1AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/07/11 3:28 a.m.•22 views

SUSE CVE-2026-15187

A security flaw has been discovered in enquirer up to 2.4.1. Affected is the function Enquirer.set of the component Public Package API. The manipulation of the argument question.name results in improperly controlled modification of object prototype attributes. The attack can be launched remotely...

5.3CVSS5.8AI score0.00427EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/07/11 2:47 a.m.•140 views

Exploit for CVE-2026-40887

CVE-2026-4088...

9.1CVSS6.1AI score0.02202EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/07/11 12:00 a.m.•21 views

PT-2026-57488

A vulnerability has been found in Eleveo Call Recording Software 9.7.0. Affected by this issue is some unknown functionality of the file /callrec/group.jsp. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may...

5.3CVSS5.7AI score0.00348EPSS
SaveExploits0References6
Rows per page
Query Builder