Lucene search
+L

65502 matches found

Nuclei
Nuclei
added 2026/08/23 2:28 a.m.29 views

ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)

ZZZCMS zzzphp v1.6.3 contains a remote code execution caused by lack of restrictions in inc/zzzfile.php, letting attackers execute arbitrary PHP code via a crafted URL in the plugins/ueditor/php/controller.php?action=catchimage source parameter, exploit requires attacker to send malicious URL and...

9.8CVSS9.8AI score0.03153EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.114 views

Vite Dev Server - Path Traversal in Optimized Deps .map Handling

Vite development server versions prior to 8.0.5, 7.3.2, and 6.4.2 are vulnerable to path traversal through the optimized dependencies sourcemap handler. The dev server's handling of .map requests for optimized dependencies resolves file paths via normalizePathpath.resolveroot, url.slice1 and call...

6.3CVSS4.8AI score0.00914EPSS
SaveExploits1References3
NVD
NVD
added 2026/08/22 4:16 p.m.7 views

CVE-2026-74680

In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: properly kill rcvurb on error in cxacrucm If cxacrucm encounters an error while submitting or waiting for sndurb, it aborts and returns the error without killing the already submitted rcvurb. This leaves the...

0.0022EPSS
SaveExploits0References8
NVD
NVD
added 2026/08/22 4:16 p.m.9 views

CVE-2026-74658

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent robust futex exit race some more A robust futex unlock stores 0 over the whole futex value - wiping FUTEXWAITERS - and wakes a single waiter. That wakeup is a one-shot notification: the protocol relies on its...

0.0022EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/22 3:33 p.m.24 views

CVE-2026-74709 xsk: clear metadata pointer when no timestamp is requested

In the Linux kernel, the following vulnerability has been resolved: xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can therefore make the kernel write a timestamp that was not requested whe...

0.00206EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/22 3:32 p.m.7 views

EUVD-2026-64595

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent robust futex exit race some more A robust futex unlock stores 0 over the whole futex value - wiping FUTEXWAITERS - and wakes a single waiter. That wakeup is a one-shot notification: the protocol relies on its...

5.6AI score0.0022EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/22 3:32 p.m.10 views

CVE-2026-74658

CVE-2026-74658 is a race condition in the Linux kernel robust futex exit handling. When a woken waiter is killed before it can acquire the futex or re-arm FUTEX_WAITERS , and a third task re-acquires the futex via the uncontended fast path, the notification is lost. The new owner sees no FUTEX_WA...

5.6AI score0.0022EPSS
SaveExploits0References8
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.25 views

LearnPress < 4.2.7.4 - Course Material - Information Disclosure

LearnPress – WordPress LMS Plugin contains a sensitive information exposure caused by insecure handling in class-lp-rest-material-controller.php, letting unauthenticated attackers extract paid course material, exploit requires no authentication. id: CVE-2024-11868 info: name: LearnPress 4.2.7.4 -...

5.3CVSS8.7AI score0.01131EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/22 12:31 a.m.9 views

EUVD-2026-64205

Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys. The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions. Each method falls back to a regex match when the key is not already stored in the hash, compiling the...

5.5AI score0.00238EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.9 views

PT-2026-79725

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjust ptr min max vals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragil...

5.4AI score0.0022EPSS
SaveExploits0References9
OSV
OSV
added 2026/08/21 11:57 p.m.8 views

CVE-2026-77781 Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys

Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys. The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions. Each method falls back to a regex match when the key is not already stored in the hash, compiling the...

5.6AI score
SaveExploits0References7
CVE
CVE
added 2026/08/21 8:29 p.m.11 views

CVE-2026-64679

Atlantis , a self-hosted Go application that processes Terraform pull request events via webhooks, is affected by a path traversal vulnerability in its workspace handling. From version 0.19.8 through 0.44.x , user-controlled workspace values supplied via repository-level atlantis.yaml configurati...

8.1CVSS5.4AI score0.00383EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/21 8:29 p.m.6 views

CVE-2026-64679 Atlantis: Path Traversal in Atlantis Workspace Handling Allows Out-of-Bounds Directory Deletion/Creation

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From 0.19.8 until 0.45.0, Atlantis does not consistently validate user-controlled workspace values supplied through accepted repository-level atlantis.yaml configuration or authenticated...

8.1CVSS5.6AI score
SaveExploits0References6
OSV
OSV
added 2026/08/21 7:29 p.m.6 views

CVE-2026-50288 @asymmetric-effort/specifyjs: URL parse failure silently allows request

SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when new URL throws a parse error, the assertSecureUrl function returned without throwing, silently allowing the request to proceed without HTTPS validation. Starting in version 0.2.136, the catch block now...

8.7CVSS5.5AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/21 7:20 p.m.7 views

CVE-2026-43820

A flaw was found in swift-nio-ssl. This vulnerability arises from the improper handling of Subject Alternative Names SANs within SSL certificates. When processing SANs that are not backed by an ASN1STRING, the system attempts to access memory outside of its allocated buffer, leading to an...

8.2CVSS5.3AI score0.00078EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/21 5:16 p.m.13 views

EUVD-2026-64008

A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers. An unauthenticated adjacent attacker can trigger the vulnerability by sending a specially crafted malformed HTTP request...

7.1CVSS5.5AI score0.00171EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/21 5:16 p.m.6 views

CVE-2026-17252

A stack-based out-of-bounds write vulnerability exists in the login request handling of the administrative web interface on TP-Link TL-MR6400 v7 routers. An unauthenticated adjacent attacker can trigger the flaw by sending a specially crafted malformed HTTP request, causing the web service proces...

7.1CVSS5.4AI score0.00171EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/21 4:57 p.m.9 views

python: Python base64: Incomplete data decoding due to premature stop at padding

A flaw was found in the Python base64 module. When decoding base64 data using functions like base64.b64decode, the decoding process prematurely stops upon encountering the first padding character. This can result in incomplete data being processed, where any information following the initial...

6CVSS5.5AI score0.00188EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/08/21 8:45 a.m.6 views

CVE-2026-74474

A flaw was found in the Linux kernel's vxlan module. This vulnerability arises from the incorrect handling of network packet headers during data transmission. Specifically, certain functions within the vxlan module fail to properly account for the initial part of the network packet, known as the...

9.8CVSS5.3AI score0.00442EPSS
SaveExploits0References4
Rockylinux
Rockylinux
added 2026/08/21 6:01 a.m.7 views

cups-filters security update

An update is available for cups-filters. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cups-filters package contains back ends, filters, and other software...

7.5CVSS5.6AI score0.00361EPSS
SaveExploits0
Rows per page
Query Builder