Lucene search
+L

120 matches found

Kitploit
Kitploit
•added 2026/11/01 8:46 a.m.•20 views

php-mt_rand

This repository does not have a README...

5.9AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/10/27 1:41 a.m.•10 views

SUSE CVE-2026-55889

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

8.3CVSS5.8AI score0.00345EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/10/26 12:00 a.m.•12 views

UBUNTU-CVE-2026-55889

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

8.3CVSS5.8AI score0.00345EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/23 1:17 p.m.•9 views

CVE-2026-55889

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

8.3CVSS0.00345EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/23 1:17 p.m.•14 views

DEBIAN-CVE-2026-55889

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

8.3CVSS5.8AI score0.00345EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/23 12:35 p.m.•15 views

EUVD-2026-108751

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

8.3CVSS5.8AI score0.00345EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/23 12:35 p.m.•29 views

CVE-2026-55889 XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

8.3CVSS0.00345EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/23 12:35 p.m.•13 views

CVE-2026-55889 XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

8.3CVSS5.8AI score0.00345EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/23 12:35 p.m.•17 views

CVE-2026-55889 XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

8.3CVSS5.8AI score
SaveExploits0References4
CVE
CVE
•added 2026/10/23 12:35 p.m.•49 views

CVE-2026-55889

The xdg-desktop-portal desktop integration portal is vulnerable to data theft via predictable FileTransfer keys prior to version 1.22.1 . Malicious sandboxed applications can exploit the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data intended for other application...

8.3CVSS5.8AI score0.00345EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/23 12:35 p.m.•8 views

CVE-2026-55889

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

8.3CVSS5.8AI score0.00345EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/23 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-55889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to...

8.3CVSS5.8AI score0.00345EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/23 12:00 a.m.•9 views

Red Hat: CVE-2026-55889: xdg-desktop-portal: xdg-desktop-portal: unauthorized data disclosure via predictable token generation

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

8.3CVSS5.8AI score0.00345EPSS
SaveExploits0References3
Debian
Debian
•added 2026/09/15 5:54 a.m.•24 views

[SECURITY] [DLA 4780-1] urwid security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4780-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA September 15, 2026 https://wiki.debian.org/LTS -...

9.2CVSS5.8AI score0.00715EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/15 12:00 a.m.•17 views

Debian dla-4780 : python-urwid-doc - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4780 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4780-1 [email protected] https://www.debian.org/lts/security/...

9.2CVSS5.9AI score0.00715EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/10 7:54 p.m.•18 views

CVE-2023-31290-Scanner-

DONATE: bc1qps62cyk9f9unmdkc9k3ccj9e2h8ywfhg2j53ec Built with ❤️ for the crypto research community. 🚀 CVE-2023-31290 Scanner - Bitcoin & Ethereum Vulnerability Exploit ⚡ The Fastest CVE-2023-31290 Milk Sad Scanner for Bitcoin & Ethereum 🔥 Up to 150,000 seeds/second on modern hardware! 📌 WHAT IS...

5.9CVSS6.6AI score0.01048EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2026/08/18 12:00 a.m.•22 views

Amazon Linux 2 : python-urwid, --advisory ALAS2-2026-3858 (ALAS-2026-3858)

The version of python-urwid installed on the remote host is prior to 1.1.1-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3858 advisory. The urwid web display backend urwid/display/web.py generates web session identifiers urwidid in Screen.start by concatenating...

9.2CVSS6.3AI score0.00715EPSS
SaveExploits0References4
osv_pysec
osv_pysec
•added 2026/08/17 11:16 a.m.•27 views

PYSEC-2026-3745

opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...

5.9CVSS6AI score0.00299EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/17 11:16 a.m.•21 views

CVE-2026-74887

opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...

6.3CVSS0.00299EPSS
SaveExploits0References2
PyPA
PyPA
•added 2026/08/17 11:16 a.m.•20 views

PYSEC-2026-3745

opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...

9.3CVSS6AI score0.00299EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder