Lucene search
+L

308 matches found

Kitploit
Kitploit
added 2026/09/01 5:34 a.m.6 views

SteganographierGUI

SteganographierGUI Hide files into MP4/MKV files Please make sure you understand what "file extension " means before watching the following tutorial. If you don't understand, first search "how to change a file extension" If it still shows as MP4 after changing the extension, that means file...

5.8AI score
SaveExploits0References6
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw was discovered in the X.Org X server. This vulnerability, an out-of-bounds read, affects the handling of XKB X Keyboard Extension modifier maps. An attacker with access to the X11 server can exploit this by sending a malformed request, causing the server to read beyond its intended memory...

9.1CVSS6.3AI score0.00489EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.5 views

Astra Linux – Vulnerability in symfony

symfony/validator is a module for the Symphony PHP framework that provides tools for validating values. It’s possible to trick a Validator configured with a regular expression using the $ metacharacter, especially when the input ends with \n. Starting from versions 5.4.43, 6.4.11, and 7.1.4,...

3.1CVSS5.8AI score0.00455EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/19 8:17 p.m.7 views

CVE-2026-68561

Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow update rule in server/permissions/boards.js called canUpdateBoardSort in server/lib/utils.js, which authorized any board member whenever fieldNames included sort. Because Meteor combines allow rules with OR...

8.8CVSS0.00375EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/17 9:16 p.m.11 views

DEBIAN-CVE-2026-65832

Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons...

8.2CVSS5.5AI score0.00303EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/17 8:59 p.m.14 views

EUVD-2026-60464

Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons...

8.2CVSS5.5AI score0.00303EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/17 8:59 p.m.29 views

CVE-2026-65832 Deskflow - Unauthenticated server-controlled out-of-bounds read in ServerProxy::setOptions / translateKey modifier-table indexing

Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons...

8.2CVSS0.00303EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/17 8:59 p.m.10 views

CVE-2026-65832 Deskflow - Unauthenticated server-controlled out-of-bounds read in ServerProxy::setOptions / translateKey modifier-table indexing

Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions DSOP values to ServerProxy::setOptions in src/lib/client/ServerProxy.cpp so that the value following a modifier option poisons...

8.2CVSS5.6AI score
SaveExploits0References5
NVD
NVD
added 2026/08/16 2:16 p.m.15 views

CVE-2026-73061

Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...

9.8CVSS0.00302EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/16 1:14 p.m.88 views

CVE-2026-73061

Scriban before 7.2.2 has an access-modifier bypass in TypedObjectAccessor, allowing template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters and mass-assign public-setter properties, permanently alt...

9.8CVSS5.4AI score0.00302EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/16 1:14 p.m.8 views

EUVD-2026-59947

Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...

9.8CVSS5.4AI score0.00302EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/16 1:14 p.m.14 views

CVE-2026-73061

Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...

9.8CVSS5.4AI score0.00302EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/16 1:14 p.m.38 views

CVE-2026-73061 Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor

Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...

9.8CVSS0.00302EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/16 1:14 p.m.14 views

CVE-2026-73061 Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor

Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...

9.3CVSS5.5AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/16 12:00 a.m.15 views

PT-2026-73148

Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visibility checks. Attackers can modify properties with private, internal, or init-only setters, and perform mass assignment on...

9.8CVSS5.4AI score0.00302EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/14 8:29 p.m.7 views

MAL-2026-14071 Malicious code in @peptideventure/peptide-score-modifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9087a96f9eff6ac558764d4ba1ec4427d1d251447f891d1a62b58ee764d9ab1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.6AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/14 8:29 p.m.39 views

Malicious code in @peptideventure/peptide-score-modifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9087a96f9eff6ac558764d4ba1ec4427d1d251447f891d1a62b58ee764d9ab1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.6AI score
SaveExploits0References3
Chainguard
Chainguard
added 2026/08/14 2:17 p.m.36 views

GO-2026-6088 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, crossplane-provider-aws-xray-fips, net-kourier-fips, kubo, vault-secrets-webhook, crossplane-provider-azure-alertsmanagement, hubble, image-factory-fips, crossplane-provider-azure-portal, kubernetes-dashboard-web,...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 2:17 p.m.38 views

GO-2026-5972 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, image-factory-fips, crossplane-provider-azure-portal, crossplane-provider-aws-ram-fips, dockerize-fips, kubescape-server, coredns, crossplane-aws-monolith, crossplane-provider-aws-sns, moby-ryuk, cert-manager-cmctl-fips, mc-fips, bank-vaults,...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 2:17 p.m.22 views

CVE-2026-33818 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, image-factory-fips, crossplane-provider-azure-portal, crossplane-provider-aws-ram-fips, dockerize-fips, kubescape-server, coredns, crossplane-aws-monolith, crossplane-provider-aws-sns, moby-ryuk, cert-manager-cmctl-fips, mc-fips, bank-vaults,...

7.5CVSS6AI score0.00568EPSS
SaveExploits0
Rows per page
Query Builder