Lucene search
+L

1232037 matches found

Packet Storm News
Packet Storm News
added 2026/12/29 12:0 a.m.399 views

GNUnet P2P Framework 0.26.2

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

6.8AI score
SaveExploits0
GithubExploit
GithubExploit
added 28 minutes ago0 views

Exploit for SQL Injection in Wordpress

PoC: WP2Shell — CVE-2026-63030 & CVE-2026-60137...

9.8CVSS0.95605EPSS
SaveExploits74
RedhatCVE
RedhatCVE
added 1 hour ago1 views

CVE-2026-75900

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

6.1CVSS
SaveExploits0References3
OSV
OSV
added 1 hour ago1 views

MAL-2026-14277 Malicious code in o0o9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d425848ef7172faf5f84ff9bd9017bf3ab1eb2343a5301ff0df1711d091118 The package's main entry index.js imports childprocess at the top of the file and invokes spawn"powershell",... as a top-level side effect line 27...

6.1AI score
SaveExploits0References2
OSV
OSV
added 1 hour ago1 views

MAL-2026-14272 Malicious code in price-scripping-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b5a1792ab4822af305a8d853e858a8063d9e82e5d91d3dbd3a748300aaf7f9 [email protected] runs node dist/postinstall.js as its npm postinstall script. That entry point resolves the installing project's root via...

SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 1 hour ago2 views

Malicious code in price-scripping-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b5a1792ab4822af305a8d853e858a8063d9e82e5d91d3dbd3a748300aaf7f9 [email protected] runs node dist/postinstall.js as its npm postinstall script. That entry point resolves the installing project's root via...

5.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 1 hour ago2 views

Malicious code in rand-txs-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383599a80e18acfe3bbf819e2c1cc5ec27a4663b2da9e18c7755000857196dc9 The package advertises itself as a random-transaction generator but its exported getTransactions API triggers execution of a hidden code payload...

5.8AI score
SaveExploits0References1
OSV
OSV
added 1 hour ago1 views

MAL-2026-14273 Malicious code in rand-txs-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383599a80e18acfe3bbf819e2c1cc5ec27a4663b2da9e18c7755000857196dc9 The package advertises itself as a random-transaction generator but its exported getTransactions API triggers execution of a hidden code payload...

SaveExploits0References1
RedhatCVE
RedhatCVE
added 2 hours ago1 views

CVE-2026-72372

A flaw was found in the AFS Andrew File System component of the Linux kernel. This vulnerability arises from insufficient locking mechanisms when modifying internal data structures related to dynamic inode management. An attacker could potentially exploit this weakness, leading to system...

7.8CVSS0.00175EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2 hours ago2 views

Malicious code in novel-suduko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21725a395742c4e3e10cd14a3c787d7a01d5cea63feec2515310f471d497f8ad The package's postinstall lifecycle script chmods and executes the bundled binary native/hint-linux-amd64 via spawnSyncBIN, , stdio: 'inherit' on eve...

5.4AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2 hours ago2 views

Malicious code in de-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93cdcef4435e4bbb8f5841076c9294b934eaebd268286204a37cab9c334a045f package.json declares both a dependencies and devDependencies entry for de-morgan pointing at http://pack.nppacks.com/npm/de-morgan, a non-npm-regist...

5.5AI score
SaveExploits0References1
NVD
NVD
added 2 hours ago3 views

CVE-2026-19417

The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user is entitled to the media file being served, allowing authenticated patient-level users to download any file in the media library, including other patients' uploaded medical reports...

SaveExploits0References1
NVD
NVD
added 2 hours ago3 views

CVE-2026-18202

The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upload types without sanitising the file contents, allowing users with the upload files capability, such as Authors, to upload a file containing malicious JavaScript that executes in the browser of any user who...

SaveExploits0References1
NVD
NVD
added 2 hours ago4 views

CVE-2026-18051

The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request path it uses to build cache file names, allowing unauthenticated attackers to write a file into any existing directory on the server, inside or outside the web root, overwriting whatever occupies the target...

SaveExploits0References1
NVD
NVD
added 2 hours ago2 views

CVE-2026-16616

The Simple File List WordPress plugin through 6.3.11 does not validate the source path of a file-move operation reachable by unauthenticated users, allowing them to read arbitrary files on the server and to relocate critical files out of the web root, leading to sensitive information disclosure a...

SaveExploits0References1
NVD
NVD
added 2 hours ago3 views

CVE-2026-16617

The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...

SaveExploits0References1
NVD
NVD
added 2 hours ago3 views

CVE-2026-16950

The Product Shortlist WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks...

SaveExploits0References1
NVD
NVD
added 2 hours ago4 views

CVE-2026-14334

The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly sanitize uploaded SVG files, allowing unauthenticated attackers to upload a file that bypasses the Booking calendar, Appointment Booking System WordPress plugin through 3.2.36's script-stripping and...

SaveExploits0References1
NVD
NVD
added 2 hours ago3 views

CVE-2026-11565

The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any role to which an administrator has granted file-manager access as low as Subscriber to read arbitrary files on the server — including...

SaveExploits0References1
Rockylinux
Rockylinux
added 2 hours ago1 views

.NET 10.0 security, bug fix, and enhancement update

An update is available for dotnet10.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross platfo...

7.8CVSS0.01057EPSS
SaveExploits0
Rows per page
Query Builder