Lucene search
+L

69735 matches found

Cvelist
Cvelist
added 2026/09/11 6:26 p.m.29 views

CVE-2026-62088 WordPress ElasticPress plugin <= 5.3.4 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress: from n/a through 5.3.4...

5.3CVSS0.00197EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/09/11 6:25 p.m.8 views

WordPress ElasticPress plugin <= 5.3.4 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by murloc.mrglwglwgl in WordPress Plugin ElasticPress versions = 5.3.4...

5.3CVSS5.7AI score0.00197EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2026/09/11 6:12 p.m.26 views

CVE-2026-62137 WordPress bbPress plugin <= 2.6.14 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in bbPress = 2.6.14 versions...

5.3CVSS0.00187EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/11 6:12 p.m.8 views

EUVD-2026-76200

Unauthenticated Sensitive Data Exposure in bbPress = 2.6.14 versions...

5.3CVSS5.7AI score0.00187EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/11 6:12 p.m.52 views

CVE-2026-62137

An unauthenticated Sensitive Data Exposure vulnerability affects the WordPress bbPress plugin in versions 2.6.14 and earlier , as discovered by Ananda Dhakal via Patchstack . The flaw allows a remote attacker with no prior access to expose sensitive data, carrying a CVSS 3.1 score of 5.3 (Medium)...

5.3CVSS5.7AI score0.00187EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 4:33 p.m.9 views

CVE-2026-18061 Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin

Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 might allow an actor with write access to the shared cache infrastructure to disclose sensitive files from application hosts that read cached query results,...

6CVSS5.9AI score
SaveExploits0References5
NVD
NVD
added 2026/09/11 4:17 p.m.11 views

CVE-2026-89012

Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilters API query parameter that allows authenticated attackers to recover protected database fields by supplying uppercase variants of denylist-protected field names. Attackers can exploit the...

7.1CVSS0.00339EPSS
SaveExploits1References3
NVD
NVD
added 2026/09/11 4:17 p.m.9 views

CVE-2026-81861

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality...

5.9CVSS0.00384EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/11 4:16 p.m.11 views

vibe-coding-security

Vibe Coding Security Before you tweet your launch, run these 69 checks. They map to the exact patterns behind the Lovable RLS CVE CVE-2025-48757, 170+ apps, 2025, the Moltbook leak 1.5M API tokens, Feb 2026, and the April 2026 Lovable platform breach source code + service keys of other users'...

9.3CVSS8.3AI score0.00829EPSS
SaveExploits3
EUVD
EUVD
added 2026/09/11 3:49 p.m.11 views

EUVD-2026-76141

Dolibarr 24.0.0 before 24.0.1 contains a case-sensitive denylist bypass vulnerability in the sqlfilters API query parameter that allows authenticated attackers to recover protected database fields by supplying uppercase variants of denylist-protected field names. Attackers can exploit the...

7.1CVSS5.8AI score0.00339EPSS
SaveExploits1References3
CVE
CVE
added 2026/09/11 3:25 p.m.15 views

CVE-2026-89265

MoguBlog through 6.2 contains an authorization bypass in the admin endpoint POST /pictureSort/getPictureSortByUid , which omits the @AuthorityVerify annotation required to enforce role-based permissions. Authenticated back-office users without image-category permissions can supply a category uid ...

5.3CVSS5.7AI score0.00214EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/11 3:17 p.m.8 views

CVE-2026-38058

The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them...

8.6CVSS0.00338EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/11 3:07 p.m.10 views

EUVD-2026-76131

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality...

5.9CVSS5.8AI score0.00384EPSS
SaveExploits1References1
CVE
CVE
added 2026/09/11 3:07 p.m.37 views

CVE-2026-81861

CVE-2026-81861 affects Schneider Electric SCADAPack and stems from CWE-522 (Insufficiently Protected Credentials) in the Secure Lock component. The flaw could expose authentication information and permit unauthorized access to RTU functionality . The CVSS 4.0 base score is 5.9 (MEDIUM) , with a n...

5.9CVSS5.8AI score0.00384EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/09/11 3:07 p.m.40 views

CVE-2026-81861

CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality...

5.9CVSS0.00384EPSS
SaveExploits1References1
CVE
CVE
added 2026/09/11 2:44 p.m.38 views

CVE-2026-38058

ST Engineering iDirect iQ200 VSAT terminals are affected by an information exposure flaw where an endpoint returns the complete device configuration as JSON, including the SECURITY section containing MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid w...

8.6CVSS5.7AI score0.00338EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/11 2:44 p.m.33 views

CVE-2026-38058 ST Engineering iDirect iQ-Series Terminals Exposure of Sensitive System Information to an Unauthorized Control Sphere

The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them...

8.6CVSS0.00338EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 1:25 p.m.11 views

Azure

Azure Offensive Security Toolkit A collection of Bash and PowerShell scripts for Azure security assessments, covering IAM privilege escalation, container security, Key Vault exposure, Entra ID configuration, and more. Designed to run in Azure Cloud Shell or any authenticated terminal. Scripts IAM...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/11 1:25 p.m.9 views

CVE-2026-89298

A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive...

4.9CVSS5.7AI score0.00244EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 1:12 p.m.6 views

CVE-langgraph

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

7.8CVSS6.5AI score0.02306EPSS
SaveExploits2References1
Rows per page
Query Builder