Lucene search
+L

396612 matches found

Packet Storm News
Packet Storm News
added 2026/12/29 12:0 a.m.385 views

GNUnet P2P Framework 0.26.2

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

6.8AI score
SaveExploits0
Cvelist
Cvelist
added 28 minutes ago2 views

CVE-2026-53502 Thumbor has path traversal via post-validation URL decoding bypass in file_loader

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, fileloader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILELOADERROOTPATH through watermark or frame filter input. This issue is fixed in 7.8.0...

8.7CVSS
SaveExploits0References3
CVE
CVE
added 28 minutes ago3 views

CVE-2026-53502

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, fileloader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILELOADERROOTPATH through watermark or frame filter input. This issue is fixed in 7.8.0...

8.7CVSS5.5AI score
SaveExploits0References3
NVD
NVD
added 1 hour ago4 views

CVE-2026-21662

Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1...

4.8CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2 hours ago7 views

CVE-2026-21662 FMS Employee Allows Upload of Unrestricted Files

Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1...

4.8CVSS
SaveExploits0References1
CVE
CVE
added 2 hours ago4 views

CVE-2026-21662

Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1...

4.8CVSS5.4AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2 hours ago5 views

Exploit for CVE-2026-66066

KindaRails2Shell: CVE-2026-66066 A zero-dependency, single-fi...

9.5CVSS6.1AI score
SaveExploits4
CVE
CVE
added 3 hours ago23 views

CVE-2026-54707

OnionShare contains a vulnerability (CVE-2026-54707) in the Receive mode logic prior to version 2.6.4. The root cause, per the provided description, is that ReceiveModeRequest._get_file_stream() wrote multipart file[] data to disk even when the text-only Receive mode setting was enabled. This cou...

5.4CVSS5.5AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 3 hours ago4 views

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A command injection vulnerability in Vim's C omni-completion script allows an attacker to execute arbitrary commands if a user is tricked into opening a maliciously crafted tags file and manually invoking the autocomplete feature...

8.4CVSS6AI score0.00137EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 3 hours ago5 views

vim: Vim: Out-of-bounds Write in Spell File Word Count

Vim is an open source, command line text editor. Prior to 9.2.0653, the treecountwords function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked...

8.4CVSS5.5AI score0.00124EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 3 hours ago4 views

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

8.4CVSS6.2AI score0.00142EPSS
SaveExploits0References5
Cvelist
Cvelist
added 3 hours ago5 views

CVE-2026-52856 Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0...

7.5CVSS
SaveExploits0References3
EUVD
EUVD
added 3 hours ago6 views

EUVD-2026-51569

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0...

7.5CVSS5.5AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 3 hours ago3 views

CVE-2026-52856

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0...

7.5CVSS5.5AI score
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 3 hours ago9 views

CVE-2026-67607 LightFTP 2.3.1 Race Condition DoS via worker_thread_cleanup

LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the server by racing a fresh connection that reuses the FTP context against an in-progress ABRT cleanup. Attackers can exploit the unprotected re-check of WorkerThreadId between workerthreadcleanup and...

8.2CVSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 3 hours ago3 views

abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories

A time-of-check time-of-use TOCTOU race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package...

7.8CVSS5.6AI score0.00103EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 3 hours ago3 views

Important: Red Hat Security Advisory: abrt security update

An update for abrt is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

7.8CVSS5.7AI score0.00103EPSS
SaveExploits0References3
EUVD
EUVD
added 5 hours ago3 views

EUVD-2026-51552

Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...

4.3CVSS5.6AI score
SaveExploits0References2
OSV
OSV
added 7 hours ago5 views

RLSA-2026:42899 Important: java-25-openjdk security update

The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fixes: JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance XBM...

7.5CVSS6.4AI score0.00365EPSS
SaveExploits1References10
BDU FSTEC
BDU FSTEC
added 7 hours ago27 views

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

8.5CVSS6.1AI score
SaveExploits0Affected Software1
Rows per page
Query Builder