Lucene search
+L

7886 matches found

GithubExploit
GithubExploit
•added 2026/05/01 4:27 p.m.•195 views

Exploit for Missing Authentication for Critical Function in Cpanel

poc...

9.8CVSS9.1AI score0.98527EPSS
SaveExploits79
GithubExploit
GithubExploit
•added 2026/05/01 3:43 p.m.•123 views

Exploit for Missing Authentication for Critical Function in Cpanel

markdown CVE-2026-41940 - WHM/cPanel Authentication Bypass...

9.8CVSS9AI score0.98527EPSS
SaveExploits79
GithubExploit
GithubExploit
•added 2026/05/01 11:27 a.m.•109 views

Exploit for Missing Authentication for Critical Function in Cpanel

No d...

9.8CVSS8.9AI score0.98527EPSS
SaveExploits79
GithubExploit
GithubExploit
•added 2026/05/01 7:27 a.m.•172 views

Exploit for Missing Authentication for Critical Function in Cpanel

🔒 cPanel CVE-2026-41940 / nuclear.x86 Security Audit & Cleanup...

9.8CVSS8.8AI score0.98527EPSS
SaveExploits79
GithubExploit
GithubExploit
•added 2026/05/01 1:34 a.m.•125 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 A security research tool for detecting and anal...

9.8CVSS9.1AI score0.98527EPSS
SaveExploits79
GithubExploit
GithubExploit
•added 2026/05/01 12:17 a.m.•191 views

Exploit for Missing Authentication for Critical Function in Cpanel

================================================================...

9.8CVSS8.7AI score0.98527EPSS
SaveExploits79
Github Security Blog
Github Security Blog
•added 2026/04/30 6:30 a.m.•32 views

django-mdeditor is Missing Authentication for Critical Function

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

9.8CVSS6.4AI score0.00308EPSS
SaveExploits0References7Affected Software1
osv_ghsa
osv_ghsa
•added 2026/04/30 6:30 a.m.•65 views

GHSA-QP2C-XQV6-PHH6 django-mdeditor is Missing Authentication for Critical Function

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

7.1CVSS6.4AI score0.00308EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/04/30 5:00 a.m.•27 views

EUVD-2025-209593

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

7.1CVSS6.4AI score0.00308EPSS
SaveExploits0References5
Mend
Mend
•added 2026/04/30 5:00 a.m.•10 views

CVE-2025-13030

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

9.8CVSS6.4AI score0.00308EPSS
SaveExploits0References9
CVE
CVE
•added 2026/04/30 5:00 a.m.•43 views

CVE-2025-13030

CVE-2025-13030 affects the django-mdeditor package. All versions are vulnerable to Missing Authentication for Critical Function in the image upload endpoint, allowing an attacker to upload malicious files and achieve arbitrary code execution due to lack of authentication and improper sanitisation...

9.8CVSS6.4AI score0.00308EPSS
SaveExploits0References5Affected Software1
osv_cve
osv_cve
•added 2026/04/30 5:00 a.m.•26 views

CVE-2025-13030

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

5.1CVSS6.5AI score
SaveExploits0References7
attackerkb
attackerkb
•added 2026/04/30 5:00 a.m.•42 views

CVE-2025-13030

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

7.1CVSS6.4AI score0.00308EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/30 12:00 a.m.•28 views

PT-2026-36039

Name of the Vulnerable Software and Affected Versions django-mdeditor affected versions not specified Description The image upload endpoint lacks authentication protection and proper sanitization of file names. This allows an attacker to upload malicious files and achieve arbitrary code execution...

9.8CVSS6.2AI score0.00308EPSS
SaveExploits0References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/30 12:00 a.m.•10 views

CVE-2025-13030: Missing Authentication for Critical Function

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

9.8CVSS6.4AI score0.00308EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/04/29 12:00 a.m.•24 views

Juniper Junos OS Vulnerability (JSA79188)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79188 advisory. - A Missing Authentication for Critical Function vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows...

6.3CVSS5.5AI score0.00434EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/28 10:46 p.m.•12 views

Missing Authentication for Critical Function

Overview github.com/coredns/coredns/core/dnsserver is a package that implements all the interfaces from Caddy, so that CoreDNS can be a servertype plugin. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the tsig plugin on non-plain-DNS...

8.7CVSS7.3AI score0.00374EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/04/28 5:34 p.m.•51 views

CVE-2026-3893 Carlson Software VASCO-B GNSS Receiver Missing Authentication for Critical Function

The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to directly access and modify its configuration and operational functions without needing credentials...

9.4CVSS0.00373EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/28 5:34 p.m.•49 views

CVE-2026-3893

The CVE-2026-3893 affects the Carlson VASCO-B GNSS Receiver. The connected PT-Security entry indicates attackers can exploit the absence of authentication to gain unauthenticated remote access, escalate privileges, and move laterally within manufacturing networks, enabling modification of configu...

9.4CVSS5.8AI score0.00373EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•29 views

Carlson VASCO-B GNSS Receiver Access Control Vulnerability

The Carlson VASCO-B GNSS Receiver is a high-precision satellite positioning receiving device developed by the American company Carlson. The Carlson VASCO-B GNSS Receiver has a access control vulnerability, which stems from the lack of an authentication mechanism. This vulnerability may allow...

9.4CVSS5.8AI score0.00373EPSS
SaveExploits0References2
Rows per page
Query Builder