Lucene search
+L

11976 matches found

EUVD
EUVD
added 1 hour ago4 views

EUVD-2026-52281

Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls Class::method in blueprint dynamic-field directives because Blueprint::isSafeDynamicCall only applies its dangerous-callable denylist to strings that do not contain '::'. An account with only page-editing...

8.6CVSS5.7AI score
SaveExploits0References3
NVD
NVD
added 2 hours ago4 views

CVE-2026-69088

Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls Class::method in blueprint dynamic-field directives because Blueprint::isSafeDynamicCall only applies its dangerous-callable denylist to strings that do not contain '::'. An account with only page-editing...

8.6CVSS
SaveExploits0References2
Cvelist
Cvelist
added 3 hours ago7 views

CVE-2026-69088 Grav CMS 2.0.7 through 2.0.10 Arbitrary Method Invocation via Blueprint

Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls Class::method in blueprint dynamic-field directives because Blueprint::isSafeDynamicCall only applies its dangerous-callable denylist to strings that do not contain '::'. An account with only page-editing...

8.6CVSS
SaveExploits0References2
CVE
CVE
added 3 hours ago9 views

CVE-2026-69088

Grav CMS 2.0.7–2.0.10 is affected by an arbitrary method invocation vulnerability in blueprint dynamic-field directives. The issue arises because Blueprint::isSafeDynamicCall() only applies its denial list to strings without '::', allowing an account with page-editing rights to insert a directive...

8.6CVSS5.7AI score
SaveExploits0References2
CVE
CVE
added 7 hours ago7 views

CVE-2026-69082

CTI-Transmute exposes a CSRF vulnerability in the admin user-deletion endpoint: /account/delete/ accepts HTTP GET, allowing an attacker to induce an authenticated admin to delete a user via a forged request. Exploitation requires an active admin session but no CTI-Transmute account or admin privi...

8.8CVSS5.6AI score
SaveExploits0References1
Nuclei
Nuclei
added 12 hours ago67 views

Telesquare TLR-2855KS6 - Arbitrary File Deletion

An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts. id: CVE-2021-46419 info: name: Telesquare TLR-2855KS6 - Arbitrary File Deletion author: DhiyaneshDK severity: critical description: | An unauthorized file deleti...

9.1CVSS7.7AI score0.71384EPSS
SaveExploits4References3
ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-67336

better-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider and mcp plugins that advertise the none algorithm and accept plain PKCE by default. Attackers can exploit algorithm negotiation to accept unsigned tokens or intercept authorization codes when PKCE plain...

9.4CVSS5.5AI score0.00159EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago28 views

CVE-2026-67323

GitPython < 3.1.51 is affected. The vulnerability stems from failing to guard against dangerous Git options passed as keyword arguments in Repo.archive() and git.ls_remote(), enabling command injection via options like --exec and --upload-pack. Additionally, Repo.iter_commits() and Repo.blame(...

8.6CVSS5.6AI score0.01016EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-16684

The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'facebook' User Contact Method in all versions up to, and including, 3.5.24 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.7AI score0.00193EPSS
SaveExploits0References6
CVE
CVE
added 2 days ago8 views

CVE-2026-16684

Easy Property Listings for WordPress is vulnerable to Stored Cross-Site Scripting via the 'facebook' User Contact Method in all versions up to 3.5.24. Root cause: insufficient input sanitization and output escaping. Enabled attackers with subscriber-level access or higher to inject scripts execut...

6.4CVSS5.7AI score0.00193EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago31 views

CVE-2026-16684 Easy Property Listings <= 3.5.24 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'facebook' User Contact Method

The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'facebook' User Contact Method in all versions up to, and including, 3.5.24 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00193EPSS
SaveExploits0References5
EUVD
EUVD
added 2 days ago10 views

EUVD-2026-51741

The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'facebook' User Contact Method in all versions up to, and including, 3.5.24 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS5.7AI score0.00193EPSS
SaveExploits0References5
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-51739

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5 This is due to missing or incorrect nonce validation on the reauthforauthorize function. This makes it possible for...

8.8CVSS5.3AI score0.00217EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2 days ago7 views

CVE-2026-15988

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5 This is due to missing or incorrect nonce validation on the reauthforauthorize function. This makes it possible for...

8.8CVSS5.3AI score0.00217EPSS
SaveExploits0References8
CVE
CVE
added 2 days ago14 views

CVE-2026-15988

The CVE refers to the WordPress plugin “AI Engine – The Chatbot, AI Framework & MCP for WordPress.” All versions up to and including 3.6.5 are affected by a CSRF vulnerability due to missing or incorrect nonce validation in reauth_for_authorize. This enables unauthenticated attackers to create ne...

8.8CVSS5.3AI score0.00217EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 3 days ago10 views

abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories

A time-of-check time-of-use TOCTOU race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package...

7.8CVSS5.6AI score0.00103EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 3 days ago6 views

abrt: TOCTOU race condition in abrt-dbus SetElement allows arbitrary file writes to dump directories

A time-of-check time-of-use TOCTOU race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution, any local user can call SetElement to write arbitrary text files into the root-owned dump directory, bypassing package...

7.8CVSS5.6AI score0.00103EPSS
SaveExploits0References4
Nuclei
Nuclei
added 3 days ago219 views

mongo-express Remote Code Execution

mongo-express before 0.54.0 is vulnerable to remote code execution via endpoints that uses the toBSON method and misuse the vm dependency to perform exec commands in a non-safe environment. id: CVE-2019-10758 info: name: mongo-express Remote Code Execution author: princechaddha severity: critical...

9.9CVSS8.5AI score0.84845EPSS
SaveExploits3References5
CVE
CVE
added 3 days ago37 views

CVE-2026-63222

CodeIgniter (PHP framework) has a path traversal vulnerability in UploadedFile::move() when the second argument is omitted, allowing an attacker to exploit client-provided filenames to write uploaded content outside the intended directory. This affects prior to version 4.7.4; a fix is available i...

7.5CVSS5.9AI score0.0045EPSS
SaveExploits0References3
OSV
OSV
added 4 days ago11 views

BIT-PYTHON-MIN-2026-0864 Configuration Injection via Carriage Return (\r) in write() method

When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters \r the resulting file could be injected with unexpected keys and values if the attacker controls the written value...

4.1CVSS5.7AI score0.00128EPSS
SaveExploits0References8
Rows per page
Query Builder