Lucene search
+L

7238 matches found

Kitploit
Kitploit
added 2026/09/18 2:58 a.m.10 views

Mangle

ESTE REPOSITORIO HA SIDO ARCHIVADO Para ver la última versión de Mangle o enviar un problema, consulte https://github.com/Tylous/Mangle. Mangle Escrito por Tyl0us Presentado en Source Zero Con 2022 Mangle es una herramienta que manipula aspectos de ejecutables compilados .exe o DLL. Mangle puede...

6AI score
SaveExploits0References1
NVD
NVD
added 2026/09/12 1:16 p.m.10 views

CVE-2026-90544

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the videoAddViewCount.json.php endpoint before updating view statistics. Authenticated attackers can increment view counts and watch-time on videos they cannot access by submitting...

5.3CVSS0.00158EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/12 12:08 p.m.12 views

CVE-2026-90544

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the videoAddViewCount.json.php endpoint before updating view statistics. Authenticated attackers with low privileges can increment view counts and watch-time on videos they cannot acc...

5.3CVSS5.8AI score0.00158EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/12 12:08 p.m.11 views

EUVD-2026-76862

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate video access permissions in the videoAddViewCount.json.php endpoint before updating view statistics. Authenticated attackers can increment view counts and watch-time on videos they cannot access by submitting...

5.3CVSS5.8AI score0.00158EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 8:19 p.m.8 views

DEBIAN-CVE-2026-89707

In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on followdown error nfsdcrossmnt initializes a local struct path with mntget and dget before calling followdown. On a negative return the error arm jumps to out without releasing those references: err =...

7.5CVSS5.8AI score0.00603EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.15 views

PT-2026-90423

In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on follow down error nfsd cross mnt initializes a local struct path with mntget and dget before calling follow down. On a negative return the error arm jumps to out without releasing those references: err ...

5.7AI score0.00603EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/10 6:00 a.m.20 views

CVE-2026-19436

Ultimate Gift Cards for WooCommerce (WordPress plugin) before version 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout. This allows unauthenticated users to obtain store credit worth more than they paid, particularly through d...

7.5CVSS5.8AI score0.00208EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/10 6:00 a.m.38 views

CVE-2026-19436 Ultimate Gift Cards For WooCommerce < 3.2.10 - Unauthenticated Gift Card Value Inflation via Discounted Purchase

The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not reconcile the value of the gift card coupon it issues against the amount actually collected at checkout, allowing unauthenticated users to obtain store credit worth more than they paid...

0.00208EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 4:18 p.m.7 views

CVE-2026-86840

The vtoken-minting and slpx pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered channelid when minting tokens without verifying that the caller is authorized to mint on behalf of that channel. Th...

9.1CVSS0.00241EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/08 3:29 p.m.10 views

EUVD-2026-72876

The vtoken-minting and slpx pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered channelid when minting tokens without verifying that the caller is authorized to mint on behalf of that channel. Th...

5.9AI score0.00241EPSS
SaveExploits0References2
F5 Networks
F5 Networks
added 2026/09/08 7:11 a.m.7 views

K000163237: Linux kernel vulnerability CVE-2026-53183

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP connection, the window field in the TCP header refers to the MPTCP-level rcvnxt and it's right edge should not move backward. Such constraint is enforc...

7.5CVSS6.5AI score0.00479EPSS
SaveExploits0
NVD
NVD
added 2026/09/06 5:17 p.m.7 views

CVE-2026-82751

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for provisioning an access key on the client's own account. When the server sponsor...

8.3CVSS0.00329EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/06 5:17 p.m.8 views

CVE-2026-82750

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server sponsors...

8.3CVSS0.00329EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/06 4:08 p.m.37 views

CVE-2026-82750 Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server sponsors...

8.3CVSS0.00329EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/06 4:08 p.m.21 views

CVE-2026-82750

ZenHive mpp (versions 0.2.0 through before 0.16.1 ) contains a vulnerability in MPP.Methods.Tempo.FeePayerPolicy.measure/3 that fails to validate the aa_authorization_list field of client-signed 0x76 envelopes. An unauthenticated remote client can attach EIP-7702 delegation entries from throwaway...

8.3CVSS5.8AI score0.00329EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/06 4:08 p.m.7 views

EEF-CVE-2026-82750 Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation

Summary Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server...

8.3CVSS5.8AI score0.00329EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/06 4:08 p.m.7 views

EUVD-2026-72148

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server sponsors...

8.3CVSS5.8AI score0.00329EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/06 4:08 p.m.7 views

CVE-2026-82750 Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for EIP-7702 account delegations of the client's choosing. When the server sponsors...

8.3CVSS5.9AI score0.00329EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/09/06 4:07 p.m.9 views

EUVD-2026-72147

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for provisioning an access key on the client's own account. When the server sponsor...

8.3CVSS5.8AI score0.00329EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/06 4:07 p.m.8 views

EEF-CVE-2026-82751 Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning

Summary Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per sponsored payment by a large multiplier and to have the sponsor pay for provisioning an access key on the client's own account. When the server...

8.3CVSS5.8AI score0.00329EPSS
SaveExploits0References4
Rows per page
Query Builder