Lucene search
+L

1436 matches found

Kitploit
Kitploit
•added 2026/10/16 7:13 a.m.•31 views

PFQ

PFQ v6.2 Introduction PFQ is a functional framework designed for the Linux operating system built for efficient packets capture/transmission 10G, 40G and beyond, in-kernel functional processing, kernel-bypass and packets steering across groups of sockets/end-points. It is highly optimized for...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/15 3:19 p.m.•22 views

CVE-2026-1434

CVE-2026-1434: Omega-PSIR is vulnerable to Reflected XSS via the lang parameter. An attacker can craft a... Overview Field| Details ---|--- CVE ID| CVE-2026-1434 Severity| MEDIUM Advisory| N/A Discovered by| Lukasz Rybak Affected Products See advisory for details. CWE Classification CWE-79:...

6.1CVSS6.5AI score0.00164EPSS
SaveExploits2References2
osv_cleanstart
osv_cleanstart
•added 2026/10/15 12:39 a.m.•8 views

CLEANSTART-2026-WE03470 Uncontrolled Recursion vulnerability in Apache Commons Lang

Security vulnerability affects the strimzi-kafka-operator package. Uncontrolled Recursion vulnerability in Apache Commons Lang...

5.3CVSS6.4AI score0.02632EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/12 3:41 p.m.•26 views

CVE-2024-7928

FastAdmin Path Traversal Vulnerability exploit A vulnerability, which was classified as problematic, has been found in FastAdmin up to 1.3.3.20220121. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal...

7.5CVSS5.5AI score0.16882EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/10/11 5:58 a.m.•17 views

apache-commons-lang2

This repository does not have a README...

5.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•8 views

PT-2026-109184

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

8.7CVSS5.8AI score0.00426EPSS
SaveExploits0References4
osv_cleanstart
osv_cleanstart
•added 2026/10/08 12:55 a.m.•15 views

CLEANSTART-2026-EA81114 Uncontrolled Recursion vulnerability in Apache Commons Lang

Security vulnerability affects the apache-hive package. Uncontrolled Recursion vulnerability in Apache Commons Lang...

5.3CVSS6.4AI score0.02632EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/10/05 12:00 a.m.•14 views

CVE-2026-83745

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

8.7CVSS5.8AI score0.00426EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/04 12:31 a.m.•24 views

EUVD-2026-92047

LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...

6.3CVSS5.9AI score0.0031EPSS
SaveExploits0References8
NVD
NVD
•added 2026/10/04 12:16 a.m.•23 views

CVE-2026-105125

LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...

6.3CVSS0.0031EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/04 12:00 a.m.•10 views

CVE-2026-105125: Improper Limitation of a Pathname to a Restricted Directory

LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...

6.3CVSS5.9AI score0.0031EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/03 11:39 p.m.•16 views

CVE-2026-105125 LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint

LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...

6.3CVSS5.9AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/10/03 11:39 p.m.•13 views

CVE-2026-105125 LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint

LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...

6.3CVSS5.9AI score0.0031EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/03 11:39 p.m.•44 views

CVE-2026-105125 LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint

LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...

6.3CVSS0.0031EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/03 11:39 p.m.•25 views

CVE-2026-105125

LaraDashboard versions prior to 1.4.8 are vulnerable to a path traversal vulnerability within the /api/translations/{lang} endpoint. This flaw allows unauthenticated attackers to read sensitive JSON files, such as composer.json, by manipulating the {lang} route segment. Specifically, on Windows h...

6.3CVSS5.9AI score0.0031EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/03 12:00 a.m.•15 views

PT-2026-104591

LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the lang route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or...

6.3CVSS5.9AI score0.0031EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/10/03 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-83745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both...

8.7CVSS5.8AI score0.00426EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/02 1:17 p.m.•36 views

CVE-2026-83745

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

8.7CVSS0.00426EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/02 1:17 p.m.•12 views

DEBIAN-CVE-2026-83745

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

8.7CVSS5.8AI score0.00426EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/10/02 1:17 p.m.•19 views

AZL-105953 CVE-2026-83745 affecting package thrift 0.24.0-1

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

8.7CVSS5.8AI score0.00426EPSS
SaveExploits0References1
Rows per page
Query Builder