Lucene search
K

43 matches found

GithubExploit
GithubExploit
added 2026/05/21 4:24 a.m.54 views

psqli

psqli Powerfull Automatic Sql injection Tools Pack Fast...

5.8AI score
Exploits0
Microsoft CVE
Microsoft CVE
added 2026/03/29 8:3 a.m.2 views

Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

...

5.3CVSS5.8AI score0.00059EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/03/27 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-33672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the...

5.3CVSS6.1AI score0.00059EPSS
Exploits0References4
NVD
NVD
added 2026/03/26 10:16 p.m.1 views

CVE-2026-33672

Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: ca...

5.3CVSS0.00059EPSS
Exploits0References2
OSV
OSV
added 2026/03/26 10:16 p.m.2 views

DEBIAN-CVE-2026-33672

Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: ca...

5.3CVSS5.8AI score0.00059EPSS
Exploits0References1
OSV
OSV
added 2026/03/26 10:16 p.m.1 views

UBUNTU-CVE-2026-33672

Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: ca...

5.3CVSS6.1AI score0.00059EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2026/03/26 10:16 p.m.2 views

CVE-2026-33672

Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: ca...

5.3CVSS6.1AI score0.00059EPSS
Exploits0References3
CVE
CVE
added 2026/03/26 9:39 p.m.14 views

CVE-2026-33672

CVE-2026-33672 affects the Picomatch glob matcher used in JavaScript. The vulnerability stems from a method-injection in the POSIX_REGEX_SOURCE object, which inherits from Object.prototype. Attackers can craft POSIX bracket expressions (for example, [[:constructor:]]) that reference inherited met...

5.3CVSS6.1AI score0.00059EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/26 9:39 p.m.1 views

CVE-2026-33672

Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: ca...

5.3CVSS6.1AI score0.00059EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/03/26 9:39 p.m.22 views

CVE-2026-33672 Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: ca...

5.3CVSS0.00059EPSS
Exploits0References2
OSV
OSV
added 2026/03/26 9:39 p.m.2 views

CVE-2026-33672 Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: ca...

5.3CVSS6.1AI score0.00059EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2026/03/26 9:39 p.m.2 views

CVE-2026-33672

Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: ca...

5.3CVSS5.8AI score0.00059EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2026/03/26 9:39 p.m.1 views

CVE-2026-33672 Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: ca...

5.3CVSS6.1AI score0.00059EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.2 views

Picomatch 安全漏洞

Picomatch is a fast and accurate Glob-style pattern matching library written in JavaScript, developed by micromatch. Versions prior to Picomatch 4.0.4, 3.0.2, and 2.3.2 contained security vulnerabilities. These vulnerabilities stemmed from method injection in the POSIXREGEXSOURCE object, which...

5.3CVSS5.8AI score0.00059EPSS
Exploits0References2
OSV
OSV
added 2026/03/25 9:13 p.m.1 views

GHSA-3V7F-55P6-F55P Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

Impact picomatch is vulnerable to a method injection vulnerability CWE-1321 affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: can reference inherited method names. These methods are implicitly...

5.3CVSS6.1AI score0.00059EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/03/25 9:13 p.m.8 views

Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching

Impact picomatch is vulnerable to a method injection vulnerability CWE-1321 affecting the POSIXREGEXSOURCE object. Because the object inherits from Object.prototype, specially crafted POSIX bracket expressions e.g., :constructor: can reference inherited method names. These methods are implicitly...

5.3CVSS6.1AI score0.00059EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.1 views

PT-2026-28173

Name of the Vulnerable Software and Affected Versions Picomatch versions prior to 4.0.4 Picomatch versions prior to 3.0.2 Picomatch versions prior to 2.3.2 Description Picomatch, a JavaScript glob matcher, contains a flaw where specially crafted POSIX bracket expressions, such as :constructor:, c...

5.3CVSS6.1AI score0.00059EPSS
Exploits0References7
CVE
CVE
added 2026/03/17 9:44 a.m.16 views

CVE-2026-3633

Summary: CVE-2026-3633 affects libsoup and enables CRLF/header/http request injection by an attacker who can control the method parameter in soup_message_new(). The flaw arises from inadequate escaping of the method value during request line construction, potentially allowing arbitrary headers or...

6.5CVSS5.9AI score0.00048EPSS
Exploits1References3Affected Software2
NVD
NVD
added 2026/02/18 10:16 p.m.3 views

CVE-2026-27178

MajorDoMo aka Major Domestic Module contains a stored cross-site scripting XSS vulnerability through method parameter injection into the shoutbox. The /objects/?method= endpoint allows unauthenticated execution of stored methods with attacker-controlled parameters. Default methods such as...

7.2CVSS0.00044EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-3071

Malware in sbrugna...

9.3CVSS6.2AI score0.0861EPSS
Exploits0References4
Rows per page
Query Builder