Lucene search
+L

69824 matches found

Kitploit
Kitploit
added 2026/09/15 7:15 p.m.8 views

CVE-2026-32662

CVE-2026-32662: Código de depuración activo en producción Aviso Campo| Valor ---|--- CVE| CVE-2026-32662 ICSA| ICSA-26-055-03 Actualización A CVSS 3.1| 5.3 Medio Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CWE| CWE-489 Código de depuración activo Investigador| Michael Groberman — Gr0m...

6.9CVSS6AI score0.00316EPSS
SaveExploits0
CVE
CVE
added 2026/09/15 7:08 p.m.9 views

CVE-2026-68529

Concrete CMS 9.0.0 through 9.5.2 contained an authorization bypass in the Express entries advanced-search dashboard action. The advanced_search() method in DashboardSelectableExpressEntryListTrait resolved an Express entity from a user-supplied entity ID without invoking canViewExpressEntries(), ...

2.1CVSS5.8AI score0.00239EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 6:57 p.m.11 views

hammer

Resumen Dow Jones Hammer es una herramienta de seguridad en la nube multi-cuenta para AWS. Identifica malas configuraciones y exposiciones de datos inseguros en los recursos de AWS más populares, en todas las regiones y cuentas. Tiene capacidades de generación de informes casi en tiempo real por...

5.7AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/09/15 6:49 p.m.3 views

CVE-2026-81567 Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Unauthenticated, blind extraction of arbitrary database content e.g. customer records, order data, stored credentials/tokens via boolean- or...

8.7CVSS5.8AI score0.00228EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/15 6:44 p.m.5 views

EUVD-2026-79027

On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus TACACS+ servers...

6.3CVSS5.7AI score0.00094EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/15 6:44 p.m.28 views

CVE-2026-73467 On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers

On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus TACACS+ servers...

6.3CVSS0.00094EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/15 6:41 p.m.25 views

CVE-2026-73466 On affected platforms running Arista EOS, under certain circumstances plaintext user passwords

On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already possess...

6.3CVSS0.00094EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/15 6:41 p.m.21 views

CVE-2026-73466

CVE-2026-73466 affects Arista EOS , where plaintext user passwords may be written to log files (/var/log/agents/Aaa-*) under CWE-532 (Insertion of Sensitive Information into Log File). The precondition is that PyServer trace level 4 on agent Aaa is explicitly enabled via a non-standard debugging ...

6.3CVSS5.8AI score0.00094EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/15 6:36 p.m.18 views

CVE-2026-73465

CVE-2026-73465 is a CWE-532 (Insertion of Sensitive Information into Log File) vulnerability in Arista EOS . When MgmtSecuritySslCertKey trace levels 0, 3, and/or 4 are enabled on the ConfigAgent agent, plaintext RSA and EC private keys may be written to /var/log/agents/ConfigAgent-* log files. E...

6.3CVSS5.8AI score0.00094EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/15 6:36 p.m.4 views

EUVD-2026-79023

On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already...

6.3CVSS5.8AI score0.00094EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/15 6:36 p.m.27 views

CVE-2026-73465 On affected platforms running Arista EOS, under certain circumstances plaintext private keys

On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already...

6.3CVSS0.00094EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 6:19 p.m.6 views

CVE-2026-82837

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that certain conditions could have allowed an authenticated user to access sensitive credentials and tokens without transiting the expected proxy due to...

5.3CVSS0.00405EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/15 6:17 p.m.7 views

CVE-2026-55375

canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, OAuth2Request::getQueryParams places appid, appsecret, refreshtoken, and code in the URL query string of token POST requests, allowing access logs, proxy logs, and APM traces to persist the credential...

5.3CVSS0.00251EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/15 6:17 p.m.4 views

CVE-2026-54549

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the uploadadimage tool in metaadsmcp/core/ads.py passes an attacker-controlled imageurl to trymultipledownloadmethods in metaadsmcp/core/utils.py, where httpx.AsyncClient uses...

8.3CVSS0.0023EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/15 6:10 p.m.10 views

CMLoot

CMLoot CMLoot fue creado para encontrar fácilmente archivos interesantes almacenados en recursos compartidos SMB de System Center Configuration Manager SCCM/CM. Los recursos compartidos se utilizan para distribuir software a clientes Windows en entornos empresariales Windows y pueden contener...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2026/09/15 5:47 p.m.6 views

EUVD-2026-78924

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread receives its caller-controlled URL through src/index.ts and validates only the literal hostname in assertUrlAllowed within src/url-reader.ts...

7.1CVSS5.7AI score0.00135EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/15 5:47 p.m.5 views

CVE-2026-58485

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.7.1, weburlread receives its caller-controlled URL through src/index.ts and validates only the literal hostname in assertUrlAllowed within src/url-reader.ts...

7.1CVSS5.7AI score0.00135EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/15 5:37 p.m.11 views

CVE-2024-37051

CVE-2024-37051 Análisis Resumen CVE-2024-37051 es una vulnerabilidad encontrada en los IDEs basados en IntelliJ de JetBrains, que afecta al complemento de GitHub. Permite la exposición no autorizada de tokens de acceso de GitHub cuando se carga un pull request PR malicioso. Detalles Técnicos La...

9.3CVSS8.1AI score0.03837EPSS
SaveExploits1
EUVD
EUVD
added 2026/09/15 5:35 p.m.10 views

EUVD-2026-78907

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that certain conditions could have allowed an authenticated user to access sensitive credentials and tokens without transiting the expected proxy due to...

5.3CVSS5.6AI score0.00405EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/15 5:35 p.m.20 views

CVE-2026-82837

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that certain conditions could have allowed an authenticated user to access sensitive credentials and tokens without transiting the expected proxy due to...

5.3CVSS5.6AI score0.00405EPSS
SaveExploits0References3
Rows per page
Query Builder