Lucene search
+L

44651 matches found

CVE
CVE
•added 2026/07/13 8:41 a.m.•43 views

CVE-2026-57794

Technical details about CVE-2026-57794 are not provided in connected documents. The initial description states a PHP Local File Inclusion in Golo Framework

7.5CVSS5.8AI score0.00511EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/13 8:41 a.m.•50 views

CVE-2026-57794 WordPress Golo Framework plugin <= 1.7.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in uxper Golo Framework golo-framework allows PHP Local File Inclusion.This issue affects Golo Framework: from n/a through = 1.7.3...

7.5CVSS0.00511EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/13 8:41 a.m.•17 views

CVE-2026-57794

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in uxper Golo Framework golo-framework allows PHP Local File Inclusion.This issue affects Golo Framework: from n/a through = 1.7.3...

7.5CVSS6.1AI score0.00511EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/13 8:41 a.m.•20 views

CVE-2026-57794 WordPress Golo Framework plugin <= 1.7.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in uxper Golo Framework golo-framework allows PHP Local File Inclusion.This issue affects Golo Framework: from n/a through = 1.7.3...

7.5CVSS5.8AI score0.00511EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/07/13 8:08 a.m.•111 views

Exploit for CVE-2026-57829

Helix Ultimate Framework — Unauthenticated Stored XSS comaja...

9.5CVSS6.1AI score0.04941EPSS
SaveExploits5
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•44 views

PT-2026-59320

NVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

8.8CVSS6.2AI score0.00552EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/07/13 12:00 a.m.•17 views

RHEL 9 : gegl04 (RHSA-2026:38497)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:38497 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: GIMP: Arbitrary code execution via heap-based buffe...

7.8CVSS7.6AI score0.00614EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
•added 2026/07/13 12:00 a.m.•13 views

Explaining Intrusion Alert Decisions of Deep Learning-Based Network Intrusion Detection Systems for Security Analysts

In this paper, we present EXP-SEC, a novel framework which can explain the intrusion detection decisions of DL-based NIDS which lead to security alerts in a way that is aligned with the domain knowledge of analysts working in Security Operations Center SOC. We highlight the following features of...

6.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•26 views

PT-2026-59322

NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...

9.8CVSS7.1AI score0.00654EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•27 views

PT-2026-59321

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering...

7.8CVSS6.5AI score0.00198EPSS
SaveExploits0References7
Spring Security Advisories
Spring Security Advisories
•added 2026/07/13 12:00 a.m.•36 views

Spring Office Hours Podcast: S5E18 - The Latest from OpenAI, Anthropic and Spring AI 2.0

Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun catch up on the fast moving world of AI and what it means for Java developers. The guys will cover recent releases from OpenAI and Anthropic, then dig into Spring AI 2.0, which is n...

6.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•11 views

CVE-2026-57794: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in uxper Golo Framework golo-framework allows PHP Local File Inclusion.This issue affects Golo Framework: from n/a through = 1.7.3...

7.5CVSS5.8AI score0.00511EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•21 views

PT-2026-59323

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...

9.8CVSS7.1AI score0.00641EPSS
SaveExploits0References7
Packet Storm News
Packet Storm News
•added 2026/07/12 12:00 a.m.•13 views

ARMOR-IMC: Adaptive Resource Mapping for Operational Robustness Via Secure In-Memory Computing

The massive data-movement overhead in traditional architectures has led to the adoption of In-Memory Computing IMC for energy-efficient Deep Neural Network DNN processing. By leveraging emerging devices like Spin-Orbit Torque Magnetic Tunnel Junctions SOT-MTJs, IMC bypasses the "memory wall" and...

6.1AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/07/12 12:00 a.m.•14 views

Quantum-Enhanced Physical-Layer Threat Detection in Metropolitan-Scale Fiber Networks

Network security is widely recognized as a key application of quantum technology. However, its large-scale deployment is hindered by the need for tight coordination between fundamentally different quantum and classical processing steps in conventional protocols. This requirement introduces strong...

6.1AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/07/11 1:00 p.m.•14 views

CVE-2026-56763 Hono - Prototype Pollution via __proto__ Key in parseBody with dot Option

Hono before 4.12.7 allows proto key in parseBody with dot option enabled, permitting specially crafted form field names to create objects with proto properties. When parsed results are merged into regular JavaScript objects using unsafe merge patterns, attackers can exploit this to achieve...

6.3CVSS5.9AI score0.00273EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/07/11 3:24 a.m.•13 views

SUSE CVE-2026-44332

Fiber is an Express inspired web framework written in Go. Prior to 3.3.0, the default Authorizer function in the BasicAuth middleware in middleware/basicauth/config.go uses short-circuit evaluation that skips password hash comparison for non-existent usernames, enabling reliable remote username...

5.3CVSS6AI score0.00517EPSS
SaveExploits1References3
Packet Storm News
Packet Storm News
•added 2026/07/11 12:00 a.m.•12 views

Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability

Large language models LLMs have transformed misinformation from a primarily content-centric problem into a broader ecosystem-level security challenge. When misused, LLMs create risks beyond false content generation, enabling attacks on the social contexts, evidence sources, retrieval corpora, and...

6.1AI score
SaveExploits0
NVD
NVD
•added 2026/07/10 10:16 p.m.•27 views

CVE-2026-57584

Phalcon is a high-performance, full-stack PHP framework. Prior to 5.15.0, every Phalcon MVC application built with a default router registers a built-in route whose compiled PCRE pattern contains the nested quantifier /., and the same construct is produced by the /:params placeholder and the CLI...

8.7CVSS0.00524EPSS
SaveExploits0References4
NVD
NVD
•added 2026/07/10 10:16 p.m.•29 views

CVE-2026-47422

Frappe is a full-stack web application framework. Prior to 15.107.5 and 16.18.2, an endpoint in reportview lacked appropriate permission checks and that has since been fixed. This vulnerability is fixed in 15.107.5 and 16.18.2...

5.3CVSS0.00381EPSS
SaveExploits0References1
Rows per page
Query Builder