Lucene search
+L

44665 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/16 12:00 a.m.•13 views

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform allows a hacker to gain full control over the application.

The vulnerability of the Discovery Framework component of the Oracle Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTPS protocol...

9.9CVSS6.7AI score0.00432EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•7 views

PT-2026-93841

Name of the Vulnerable Software and Affected Versions Dell Update Package Framework versions prior to 26.07.03 Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. A low privileged attacker with local access could exploit this...

7.8CVSS5.7AI score0.0059EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•5 views

CVE-2026-71179: Improper Neutralization of Special Elements used in an OS Command

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileg...

7.8CVSS5.8AI score0.0059EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•5 views

CVE-2026-71182: Improper Link Resolution Before File Access

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

6CVSS5.8AI score0.00148EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•9 views

PT-2026-93844

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

6CVSS5.8AI score0.00148EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•32 views

PT-2026-93322

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.11 through 19.1.7 GitLab EE versions 19.2 through 19.2.5 GitLab EE versions 19.3 through 19.3.1 Description Improper authorization controls on compliance framework management allow an authenticated user with the Security...

4.3CVSS6.4AI score0.00312EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•9 views

CVE-2026-71181: Improper Link Resolution Before File Access

Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

6CVSS5.8AI score0.00148EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•10 views

CVE-2026-71180: Unchecked Return Value

Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.2CVSS5.8AI score0.0015EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2026/09/16 12:00 a.m.•16 views

A GAN-Based Framework for Robust DDoS Attack Detection

The availability and consistency of online services remain vulnerable due to Distributed Denial of Service DDoS attacks. These attacks are evolving by adopting more complex strategies to evade traditional network security systems. Despite the effectiveness of machine learning models in detecting...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•8 views

PT-2026-93842

Name of the Vulnerable Software and Affected Versions Dell Update Package Framework versions prior to 26.07.03 Description An Unchecked Return Value issue exists where the software fails to properly verify the result of a function call. A low privileged attacker with local access can exploit this...

8.2CVSS5.7AI score0.0015EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/09/16 12:00 a.m.•17 views

The vulnerability of the Security Framework component of the Oracle WebCenter Portal web platform allows a perpetrator to gain full control over the application.

The vulnerability of the Security Framework component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using the HTTP network protocol...

9.9CVSS6.6AI score0.00432EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•6 views

CVE-2026-86358: Stack-based Buffer Overflow

Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution...

8.8CVSS5.9AI score0.00406EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/15 10:17 p.m.•29 views

CVE-2026-81855

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

9.3CVSS0.00589EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/15 10:14 p.m.•10 views

CLSA-2026-1789510477 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.30-tuxcare.11...

7.5CVSS6.6AI score0.0046EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/09/15 9:31 p.m.•51 views

CVE-2026-81855 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

9.3CVSS0.00589EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/15 9:31 p.m.•24 views

CVE-2026-81855 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

9.3CVSS5.8AI score0.00589EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/15 9:31 p.m.•55 views

CVE-2026-81855

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard , a marine engine management platform. An attacker with network access and no prior privileges can exploit this to gain high confidentiality and high integrity...

9.3CVSS5.8AI score0.00589EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/15 9:16 p.m.•17 views

CVE-2026-61554

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the httppoll C2 transport accepts attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication is completed. A remote unauthenticated attacker can create arbitrary polling sessions and send...

7.5CVSS0.00707EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/15 9:14 p.m.•18 views

zeek v9.0.0

The Zeek Network Security Monitor A powerful framework for network traffic analysis and security monitoring. Key Features — Documentation — Getting Started — Development — License Key Features In-depth Analysis Zeek ships with analyzers for many protocols, enabling high-level semantic analysis at...

6AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/09/15 8:48 p.m.•20 views

EUVD-2026-79996

emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the httppoll C2 transport accepts attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication is completed. A remote unauthenticated attacker can create arbitrary polling sessions and send...

7.5CVSS5.9AI score0.00707EPSS
SaveExploits0References2
Rows per page
Query Builder