Lucene search
+L

114753 matches found

CVE
CVE
•added 2026/10/12 8:04 p.m.•23 views

CVE-2026-92116

Apache Allura versions through 1.21.0 are vulnerable to an OAuth1 callback validation issue, categorized under CWE-601 (URL Redirection to Untrusted Site). This flaw allows for potential open redirect consequences due to missing validation during the OAuth1 callback process. Impacted users are re...

5.8AI score0.00265EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/12 7:58 p.m.•15 views

CVE-2017-8046

This repository does not have a README...

9.8CVSS8.4AI score0.7453EPSS
SaveExploits8
Kitploit
Kitploit
•added 2026/10/12 7:55 p.m.•15 views

CVE-2019-16113

This repository does not have a README...

8.8CVSS6.8AI score0.77962EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/10/12 7:55 p.m.•19 views

CVE-2026-51947-Advisory

This repository does not have a README...

9.8CVSS5.8AI score0.01074EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/12 7:47 p.m.•22 views

CVE-2022-3992

CVE-2022-3992 Cross-Site Scripting in WonderCMS Description: A cross-site scripting XSS vulnerability in Sanitization Management System v1.0 allows potential attackers to upload arbitrary files via a crafted name into the system logo Fields of the System Info Fields. The cookie has no HttpOnly Fl...

6.1CVSS6.3AI score0.00495EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/10/12 7:42 p.m.•24 views

CVE-2024-7135

CVE-2024-7135 The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getfile' function in all versions up to, and including, 0.21.7. The function is also vulnerable to directory traversal. This makes it possible for authenticated...

6.5CVSS6.3AI score0.02667EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/12 7:20 p.m.•14 views

CVE-2023-20198

This repository does not have a README...

10CVSS8.2AI score0.99609EPSS
SaveExploits30
NVD
NVD
•added 2026/10/12 7:16 p.m.•16 views

CVE-2026-108921

A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This impacts the function mysqlquery of the file removeannouncements.php of the component State-Changing Endpoints. Performing a manipulation of the argument ID results in missi...

7.5CVSS0.00657EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/12 7:16 p.m.•18 views

CVE-2026-57118

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents alias register GET /path/list, POST /path, and POST /path/agentid' without access-control checks before listing agents or calling agent.chat. A remotely exposed server can therefore let...

9.8CVSS0.00325EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/12 6:48 p.m.•13 views

EUVD-2026-97774

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents alias register GET /path/list, POST /path, and POST /path/agentid' without access-control checks before listing agents or calling agent.chat. A remotely exposed server can therefore let...

9.8CVSS5.8AI score0.00325EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/12 6:45 p.m.•17 views

CVE-2026-108921 KusalkaSilva Learning-Management-System State-Changing Endpoints remove_announcements.php mysql_query missing authentication

A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This impacts the function mysqlquery of the file removeannouncements.php of the component State-Changing Endpoints. Performing a manipulation of the argument ID results in missi...

6.9CVSS5.3AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/10/12 6:45 p.m.•11 views

EUVD-2026-97770

A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This impacts the function mysqlquery of the file removeannouncements.php of the component State-Changing Endpoints. Performing a manipulation of the argument ID results in missi...

7.5CVSS6.8AI score0.00657EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/12 6:45 p.m.•20 views

CVE-2026-108921

The KusalkaSilva Learning-Management-System is vulnerable to a missing authentication flaw in the State-Changing Endpoints component. Specifically, the mysql_query function within the remove_announcements.php file fails to properly authenticate requests when the ID argument is manipulated. This v...

7.5CVSS6.8AI score0.00657EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/12 6:45 p.m.•38 views

CVE-2026-108921 KusalkaSilva Learning-Management-System State-Changing Endpoints remove_announcements.php mysql_query missing authentication

A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This impacts the function mysqlquery of the file removeannouncements.php of the component State-Changing Endpoints. Performing a manipulation of the argument ID results in missi...

7.5CVSS0.00657EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/10/12 5:25 p.m.•7 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.9CVSS5.6AI score0.00384EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/12 5:25 p.m.•7 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.9CVSS5.6AI score0.00384EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/12 5:25 p.m.•8 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.9CVSS5.6AI score0.00384EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/12 5:25 p.m.•7 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.6AI score0.00384EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/12 5:25 p.m.•6 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.6AI score0.00384EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/12 5:25 p.m.•7 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.6AI score0.00384EPSS
SaveExploits0References2
Rows per page
Query Builder