Lucene search
+L

957 matches found

Kitploit
Kitploit
•added 2026/10/30 12:22 a.m.•23 views

aws__aws-sdk-java_CVE-2022-31159_1-12-2600

AWS SDK for Java The AWS SDK for Java enables Java developers to easily work with Amazon Web Servicesaws and build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon Glacier, and more. See the AWS SDK for Java 2.xaws-sdk-for-java-2x for how to get started. In Maintenance Mode as of July 3...

7.9CVSS6.9AI score0.01616EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/10/29 7:22 p.m.•32 views

cuckoo

.. image:: https://cuckoosandbox.org/assets/images/cuckoo-black.png :alt: Cuckoo Sandbox :target: https://cuckoosandbox.org/ PLEASE NOTE: Cuckoo Sandbox 2.x is currently unmaintained. Any open issues or pull requests will most likely not be processed, as a current full rewrite of Cuckoo is...

5.5AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/24 10:57 a.m.•31 views

RedEye

RedEye : Red Team C2 Log Visualization ⚠️ This Repo Currently in Maintenance Mode ⚠️ This GitHub repository is no longer under active development. We'll review community issues and pull requests for bug fixes, but won't consider any new feature additions. RedEye is an open-source analytic tool...

6.3AI score
SaveExploits0References9
Patchstack
Patchstack
•added 2026/10/21 2:09 p.m.•12 views

WordPress CMP – Coming Soon & Maintenance plugin 4.1.19-4.1.20 - Unauthenticated Maintenance Mode Bypass vulnerability

Unauthenticated Maintenance Mode Bypass vulnerability discovered by Sanjeev Kumar in WordPress Plugin CMP – Coming Soon & Maintenance versions 4.1.19-4.1.20...

5.3CVSS5.8AI score0.00256EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/10/21 9:17 a.m.•8 views

CVE-2026-101138

The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whitelist by manually entered URL pattern, allowing unauthenticated visitors to view the content of those pages while maintenance mode is active...

5.3CVSS0.00256EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/21 8:38 a.m.•11 views

EUVD-2026-107141

The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whitelist by manually entered URL pattern, allowing unauthenticated visitors to view the content of those pages while maintenance mode is active...

5.3CVSS5.9AI score0.00256EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/21 8:38 a.m.•27 views

CVE-2026-101138 CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unauthenticated Maintenance Mode Bypass via Custom URL Whitelist

The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whitelist by manually entered URL pattern, allowing unauthenticated visitors to view the content of those pages while maintenance mode is active...

5.3CVSS0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/21 8:38 a.m.•11 views

CVE-2026-101138 CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unauthenticated Maintenance Mode Bypass via Custom URL Whitelist

The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whitelist by manually entered URL pattern, allowing unauthenticated visitors to view the content of those pages while maintenance mode is active...

5.3CVSS5.9AI score0.00256EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/21 8:38 a.m.•15 views

CVE-2026-101138

The CMP – Coming Soon & Maintenance WordPress plugin, in versions 4.1.19 through 4.1.20 , is vulnerable to an unauthenticated maintenance mode bypass. The flaw occurs because the plugin fails to correctly apply maintenance mode restrictions to pages included in a whitelist via manually entered UR...

5.3CVSS5.9AI score0.00256EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•9 views

PT-2026-120498

The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whitelist by manually entered URL pattern, allowing unauthenticated visitors to view the content of those pages while maintenance mode is active...

5.3CVSS5.9AI score0.00256EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/16 3:28 a.m.•23 views

CVE-2026-111443

Wheels versions 4.0.6 through 4.1.2 contain a vulnerability allowing an unauthenticated client to switch a request into a separate test application context in production environments. This can be triggered by providing an X-Wheels-Test-Context header, a WHEELS_TEST_CONTEXT cookie, or by including...

6.5CVSS6AI score0.0016EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/16 3:28 a.m.•15 views

EUVD-2026-102605

Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-Test-Context header or WHEELSTESTCONTEXT cookie with any value, or including a test-runner path anywhere in the URL, even the quer...

6.5CVSS6AI score0.0016EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/10/16 3:28 a.m.•7 views

CVE-2026-111443

Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-Test-Context header or WHEELSTESTCONTEXT cookie with any value, or including a test-runner path anywhere in the URL, even the quer...

6.5CVSS6AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/10/16 3:28 a.m.•11 views

CVE-2026-111443

Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-Test-Context header or WHEELSTESTCONTEXT cookie with any value, or including a test-runner path anywhere in the URL, even the quer...

6.5CVSS6AI score0.0016EPSS
SaveExploits0References1
Mend
Mend
•added 2026/10/16 3:28 a.m.•11 views

CVE-2026-111443

Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-Test-Context header or WHEELSTESTCONTEXT cookie with any value, or including a test-runner path anywhere in the URL, even the quer...

6.9CVSS6AI score0.0016EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/16 12:00 a.m.•8 views

CVE-2026-111443: Use of Less Trusted Source

Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-Test-Context header or WHEELSTESTCONTEXT cookie with any value, or including a test-runner path anywhere in the URL, even the quer...

6.5CVSS6AI score0.0016EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/16 12:00 a.m.•14 views

PT-2026-115406

Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-Test-Context header or WHEELS TEST CONTEXT cookie with any value, or including a test-runner path anywhere in the URL, even the...

6.5CVSS6AI score0.0016EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/10/15 4:00 p.m.•8 views

WHEELS.DEV: Vulnerabilities in Wheel Trust Management

WHEELS.DEV Wheels version 4.0.6 to 4.1.2 has a trust management vulnerability. This vulnerability arises from unverified clients being able to switch requests to an independent test application context including the production environment by providing arbitrary values for the X-Wheels-Test-Contex...

6.5CVSS6.1AI score0.0016EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•25 views

Astra Linux – Vulnerability in Zabbix

Zabbix Frontend offers a feature that enables administrators to manage the installation and ensure that only certain IP addresses can access it. This way, no user will be able to access the Zabbix Frontend during maintenance, and sensitive data will be protected from being disclosed. An attacker...

9.8CVSS8.1AI score0.01265EPSS
SaveExploits1References2
CVE
CVE
•added 2026/10/14 8:19 p.m.•46 views

CVE-2026-0318

Palo Alto Networks PAN-OS software on Panorama contains a stack-based buffer overflow vulnerability within the log processing functionality . An attacker can exploit this flaw to trigger a denial of service (DoS) condition, which may cause the Panorama device to enter maintenance mode. This vulne...

8.2CVSS6.2AI score0.00317EPSS
SaveExploits0References1
Rows per page
Query Builder