Lucene search
+L

6657 matches found

Positive Technologies
Positive Technologies
added 2026/04/22 12:00 a.m.20 views

PT-2026-34459

Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling SEH mechanism that allows local attackers to execute arbitrary code by supplying a malicious file path. Attackers can create a backup job with a crafted payload in the external file location...

8.6CVSS6.8AI score0.00205EPSS
SaveExploits1References4
CVE
CVE
added 2026/04/21 5:05 p.m.35 views

CVE-2026-40584

CVE-2026-40584 affects RansomLook. The vulnerability arises in the API at website/web/api/genericapi.py prior to version 1.9.0, where entries marked private are not properly filtered due to removing elements from a list while iterating. This can cause private location entries to be unintentionall...

7.5CVSS5.8AI score0.00276EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/21 5:05 p.m.11 views

CVE-2026-40584

RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Prior to 1.9.0, the API in the affected application improperly filters private location entries in website/web/api/genericapi.py. Because the code removes elements from a list while iterating over it, entries...

6.9CVSS5.8AI score0.00276EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/04/21 5:05 p.m.14 views

CVE-2026-40584 RansomLook - Improper Filtering of Private Location Entries in API Endpoints Leads to Information Exposure

RansomLook is a tool to monitor Ransomware groups and markets and extract their victims. Prior to 1.9.0, the API in the affected application improperly filters private location entries in website/web/api/genericapi.py. Because the code removes elements from a list while iterating over it, entries...

6.9CVSS5.9AI score
SaveExploits0References4
Malwarebytes
Malwarebytes
added 2026/04/21 10:12 a.m.17 views

Android 17 ends all-or-nothing access to your contacts

Some of the apps on your phone want your contacts. Most don't need them all, but have been happily slurping up the lot for years. Google has decided to do something about that with the next version of Android. Android 17 currently in preview is introducing a new Contact Picker that lets users gra...

5.7AI score
SaveExploits0
SUSE Linux
SUSE Linux
added 2026/04/21 9:20 a.m.14 views

Security update 5.1.3 for Multi-Linux Manager Client Tools

This update fixes the following issues: spacecmd: Version 5.1.13-0 Update translation strings uyuni-tools: Version 5.1.26-0 Fix applying PTF with images from RPMs bsc1252548 Ssl Key file can miss if CA password is blank bsc1254154 mgrpxy ssh tuning should happens before crypto policies bsc1254619...

8.7CVSS5.7AI score0.00375EPSS
SaveExploits0References36
OSV
OSV
added 2026/04/20 9:16 p.m.7 views

MINI-946P-F46H-JX99

Bulletin has no description...

7.5CVSS6.5AI score0.00677EPSS
SaveExploits1
OSV
OSV
added 2026/04/20 9:00 p.m.18 views

MINI-PHFR-QM8X-2JC6

Bulletin has no description...

8.8CVSS5.6AI score0.00258EPSS
SaveExploits1
EUVD
EUVD
added 2026/04/20 3:34 a.m.16 views

EUVD-2026-23743

A vulnerability was identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This vulnerability affects unknown code of the file buslocation.php of the component HTTP GET Parameter Handler. The manipulation of the argument busid leads to sql...

7.5CVSS5.6AI score0.00259EPSS
SaveExploits0References5
Spring Security Advisories
Spring Security Advisories
added 2026/04/20 12:00 a.m.41 views

Potential Security Misconfiguration when Using withIssuerLocation

When an application configures JWT decoding with NimbusJwtDecoder or NimbusReactiveJwtDecoder , it must configure an OAuth2TokenValidator separately, for example by calling setJwtValidator . This is easy to miss when using NimbusJwtDecoderwithIssuerLocation or...

5.3CVSS5.8AI score0.00203EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2026/04/20 12:00 a.m.18 views

School Management System 安全漏洞

School Management System is a school management system developed by ManiKandan G, based on PHP and MySQL. There is a security vulnerability in School Management System, which stems from incorrect handling of the busid parameter in the buslocation.php file, potentially leading to SQL injection...

7.5CVSS7.2AI score0.00259EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/18 6:25 p.m.7 views

MINI-CP66-X95J-HFQH

Bulletin has no description...

7.1CVSS5.6AI score0.00261EPSS
SaveExploits0
OSV
OSV
added 2026/04/18 5:16 p.m.8 views

MINI-VVJW-2PR8-Q7XV

Bulletin has no description...

9.8CVSS5.6AI score0.00536EPSS
SaveExploits0
OSV
OSV
added 2026/04/18 4:16 p.m.15 views

MINI-3H43-92CX-GM5Q

Bulletin has no description...

7.1CVSS5.6AI score0.00261EPSS
SaveExploits0
OSV
OSV
added 2026/04/18 4:01 p.m.9 views

MINI-3MVP-6PC8-HHC3

Bulletin has no description...

9.8CVSS5.6AI score0.00536EPSS
SaveExploits0
OSV
OSV
added 2026/04/18 4:01 p.m.10 views

MINI-RHJF-HVV3-6347

Bulletin has no description...

7.1CVSS5.6AI score0.00261EPSS
SaveExploits0
OSV
OSV
added 2026/04/18 3:31 p.m.8 views

MINI-MJ7W-3H42-7C68

Bulletin has no description...

9.8CVSS5.6AI score0.00536EPSS
SaveExploits0
OSV
OSV
added 2026/04/18 2:45 p.m.8 views

MINI-3HMF-235G-9R9J

Bulletin has no description...

7.1CVSS5.6AI score0.00261EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/04/18 7:22 a.m.12 views

CVE-2026-37344

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/managelocation.php...

7.2CVSS5.8AI score0.00249EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/18 2:46 a.m.8 views

MINI-G892-3JV5-6Q5R

Bulletin has no description...

8.7CVSS5.6AI score0.00656EPSS
SaveExploits0
Rows per page
Query Builder