Lucene search
+L

24039 matches found

Positive Technologies
Positive Technologies
•added 2026/06/08 12:00 a.m.•39 views

PT-2026-47203

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the argument Password results in sql injection. It is possible to launch the attack remotely. The exploit has been made publi...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/06/08 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-46309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/uapi: Reject cohnone PAT index for CPU cached memory in madvise Add validation in...

7CVSS5.8AI score0.00173EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/08 12:00 a.m.•25 views

SourceCodester Class and Exam Timetabling System 注入漏洞

SourceCodester Class and Exam Timetabling System is an open-source classroom and exam scheduling system developed by SourceCodester. Version 1.0 of the SourceCodester Class and Exam Timetabling System has a SQL injection vulnerability, which stems from improper handling of the parameter "Password...

7.5CVSS7.5AI score0.00263EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/08 12:00 a.m.•23 views

PT-2026-47443

Name of the Vulnerable Software and Affected Versions CodeAstro Student Attendance Management System version 1.0 Description A remote SQL injection exists in the /attendance-php/index.php file. The issue occurs when the Username argument is manipulated, allowing an attacker to interfere with the...

7.5CVSS7.2AI score0.00269EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/06/08 12:00 a.m.•19 views

PT-2026-47378

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An array-index-out-of-bounds access exists in the ath5k WiFi driver. The issue occurs within the ath5k tasklet tx function in the drivers/net/wireless/ath/ath5k/base.c file. Specifically...

8.3CVSS5.5AI score0.00354EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/08 12:00 a.m.•23 views

PT-2026-47604

Name of the Vulnerable Software and Affected Versions netty-codec-haproxy versions prior to 4.1.135.Final netty-codec-haproxy versions prior to 4.2.15.Final Description A flaw in the netty-codec-haproxy component of the Netty network application framework allows a remote attacker to cause a Denia...

7.5CVSS6AI score0.00882EPSS
SaveExploits0References411
RedhatCVE
RedhatCVE
•added 2026/06/07 12:43 a.m.•22 views

CVE-2026-45758

Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of guardrails-ai 0.10.1 to PyPI. Aany user who installed guardrails-ai==0.10.1 from PyPI on May 11, 2026 may be affected. Security...

9.6CVSS5.5AI score0.0049EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/06/06 9:00 p.m.•29 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

9.8CVSS5.7AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/06 9:00 p.m.•19 views

Embedded Malicious Code

Overview embiggen is a graph machine learning submodule of the 🍇 GRAPE library. Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that ha...

9.8CVSS5.7AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/06 9:00 p.m.•21 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

9.8CVSS5.7AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/06 9:00 p.m.•25 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

9.8CVSS5.7AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/06 9:00 p.m.•20 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

9.8CVSS5.7AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/06 9:00 p.m.•20 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

9.8CVSS5.7AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/06 9:00 p.m.•32 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

9.8CVSS5.7AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/06 9:00 p.m.•14 views

Embedded Malicious Code

Overview ppkt2synergy is a Python library for analyzing correlations and synergy in GA4GH Phenopacket cohorts. Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, ...

9.8CVSS5.7AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/06 9:00 p.m.•23 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

9.8CVSS5.7AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/06 9:00 p.m.•34 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

9.8CVSS5.6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/06 9:00 p.m.•22 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

9.8CVSS5.6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/06/06 9:00 p.m.•18 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...

9.8CVSS5.7AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/06/06 9:31 a.m.•28 views

EUVD-2025-26378

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. This issue affects OctoCloud: from s1.09.02 before v1.11.01...

4.7CVSS5.4AI score0.00241EPSS
SaveExploits0References3
Rows per page
Query Builder