Lucene search
+L

90651 matches found

RedhatCVE
RedhatCVE
added 2026/09/12 12:12 a.m.4 views

CVE-2026-80954

A flaw was found in the Linux kernel's i3c driver. The i3cdevicegetsupportedxfermode function attempts to access a device descriptor without holding the necessary lock. This unlocked dereference can lead to memory corruption, potentially causing system instability or a denial of service...

SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/09/11 11:42 p.m.10 views

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management related to the lack of authentication for critical functions, allowing attackers to compromise the integrity and accessibility of protected information

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...

8.5CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/11 11:42 p.m.12 views

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system, which stems from the lack of authentication for a critical function, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility o...

10CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/11 11:42 p.m.19 views

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system, which stems from the lack of authentication for a critical function, allows attackers to execute arbitrary code.

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS6.2AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
added 2026/09/11 11:37 p.m.8 views

360WFP_Exploit

360WFPExploit A proof-of-concept PoC demonstrating potential abuse of the 360 Security WFP driver 360netmonx64wfp.sys interface, aimed at verifying the risk that IOCTL interfaces without caller authentication may be misused by third-party programs. This project is intended for security research a...

6AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/11 11:27 p.m.4 views

CVE-2026-80939

A flaw was found in the Linux kernel's rtw89 PCI driver. During a warm reboot on ARM64 platforms, the driver's missing shutdown callback fails to stop radio frequency kill rfkill polling. This leads to attempts to read from a non-responding device, causing a fatal asynchronous SError and resultin...

SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/11 11:25 p.m.3 views

CVE-2026-89610

A flaw was found in the Linux kernel's NTFS component. The mapping pairs decoder fails to verify if a run length extends beyond the volume boundary. A local attacker could exploit this by providing a malformed NTFS image with a crafted mapping pairs array. This could lead to memory corruption and...

SaveExploits0References5
Kitploit
Kitploit
added 2026/09/11 10:18 p.m.8 views

CVE-2024-9234

CVE-2024-9234 GutenKit = 2.1.0 - Unauthenticated Arbitrary File Upload Description The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the...

9.8CVSS8.4AI score0.10446EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2026/09/11 10:17 p.m.4 views

CVE-2026-89439

A flaw was found in the Linux kernel's Intel Speed Select Technology ISST driver. A missing NULL check for isstcommon.sstinst during failed socket loading could allow a local attacker to trigger a NULL pointer dereference. This vulnerability could lead to a system crash, resulting in a Denial of...

4.4CVSS
SaveExploits0References7
CVE
CVE
added 2026/09/11 9:49 p.m.8 views

CVE-2026-90448

CVE-2026-90448 affects a read-only deployment mode that proxies a set of API routes without restricting allowed request methods. One of these routes accepts a request that creates or overwrites a stored record with an attacker-chosen identifier, using the application's own elevated backend creden...

7.1CVSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/09/11 9:46 p.m.3 views

CVE-2026-89609

A flaw was found in the eCryptfs component of the Linux kernel. A race condition occurs during the cleanup of the daemon message queue because a required lock is not held. This can lead to unpredictable system behavior or instability due to concurrent access to shared message context lists...

5.3CVSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/11 9:37 p.m.7 views

CVE-2023-20198

This repository does not have a README...

10CVSS7.6AI score0.99571EPSS
SaveExploits27
Github Security Blog
Github Security Blog
added 2026/09/11 9:32 p.m.4 views

ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider

Summary A token lifecycle validation vulnerability was discovered in ZITADEL's external JWT Identity Provider IdP implementation Specifically, within the validation pipeline, if an incoming JWT omits the exp claim entirely, the expiration block is silently skipped rather than rejected. The token ...

4.2CVSS0.00266EPSS
SaveExploits0References7Affected Software1
EUVD
EUVD
added 2026/09/11 9:32 p.m.21 views

EUVD-2026-42963

ZITADEL: Missing Token Expiration exp Validation in JWT IdP Provider...

4.2CVSS6.1AI score0.00266EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/09/11 9:31 p.m.5 views

Shopper: Missing authorization on product removal actions in CollectionProducts component

Title Missing authorization on product removal actions in CollectionProducts component Description A lack of authorization control was discovered on both the per-record delete action and the bulk delete action inside packages/admin/src/Livewire/Components/Collection/CollectionProducts.php. Neithe...

SaveExploits0References2Affected Software1
OSV
OSV
added 2026/09/11 9:31 p.m.3 views

GHSA-2CG9-97GQ-9MQP Shopper: Missing authorization on product removal actions in CollectionProducts component

Title Missing authorization on product removal actions in CollectionProducts component Description A lack of authorization control was discovered on both the per-record delete action and the bulk delete action inside packages/admin/src/Livewire/Components/Collection/CollectionProducts.php. Neithe...

8.1CVSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 9:30 p.m.3 views

CVE-2026-89772

A flaw was found in the Btrfs filesystem of the Linux kernel. This vulnerability allows a local attacker with write access to a memory-mapped file to modify data while it is being written to disk. This can lead to data corruption, where the integrity of the stored information is compromised, or...

6.3CVSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/09/11 9:30 p.m.4 views

Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)

Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...

SaveExploits0References2Affected Software1
OSV
OSV
added 2026/09/11 9:30 p.m.2 views

GHSA-99H5-JHH7-V3R3 Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)

Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...

6.5CVSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/09/11 9:29 p.m.4 views

Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...

SaveExploits0References2Affected Software1
Rows per page
Query Builder