68003 matches found
CVE-1999-0512
creationtimestamp| type| source ---|---|--- 2026-09-08 06:48:06+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smtp/smtprelay.rb...
CLEANSTART-2026-SH05010 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
EUVD-2026-72534
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-Superadmin administrators to install modules. Attackers can download and auto-activate arbitrary PHP modules from the marketplace over unsigned HTTP requests, achieving remote...
CVE-2026-79572
An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...
PT-2026-88518
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4 20 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulati...
PT-2026-87110
An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...
PT-2026-88906
Name of the Vulnerable Software and Affected Versions WP Plugin Crazy Domains versions prior to 2.5.3 WP Plugin Web versions prior to 2.3.5 WP Plugin Hostgator versions prior to 3.1.1 WP Plugin Bluehost versions prior to 4.17.2 wp-module-data versions prior to 2.9.5 Description Several Newfold...
CVE-2026-79572
The Distribution Management v1.0.0 software contains an XML External Entity (XXE) vulnerability within its level-rule module . Attackers can exploit this flaw by supplying a crafted XML payload to perform unauthorized actions, such as reading sensitive files , scanning internal networks , or laun...
CVE-2026-79572
An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...
PT-2026-87039
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load mon module's stop path where exit and cleanup deletes the LoadMon object and frees the performance counter before perf end attempts to access it. Attackers can trigger this vulnerability by issuing the load mon stop...
PT-2026-87109
Name of the Vulnerable Software and Affected Versions PayTR Virtual Pos iFrame API WHMCS Module versions 9.0.0 through 9.0.2 Description An observable timing discrepancy exists in the PayTR Virtual Pos iFrame API WHMCS Module. This flaw allows for Black Box Reverse Engineering, a technique used t...
PT-2026-87002
Name of the Vulnerable Software and Affected Versions Siveillance Control Pro versions prior to 3.0.12.2173 Siveillance Control Pro versions prior to 4.0.9.2178 Siveillance Control versions prior to 3.0.22.2177 Siveillance Control versions prior to 4.0.11.2177 Description A flaw in the OIS web...
PT-2026-87108
Name of the Vulnerable Software and Affected Versions PayTR Virtual Pos iFrame API WHMCS Module versions 9.0.0 through 9.0.2 Description Improper validation of the specified quantity in the input allows for input data manipulation within the PayTR Virtual Pos iFrame API WHMCS Module...
CVE-2026-69720: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-69508: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
RHEL 9 : pam (RHSA-2026:64815)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64815 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...
CVE-2026-53581: Improper Limitation of a Pathname to a Restricted Directory
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.420 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulatin...
CVE-2026-52486: Improper Verification of Cryptographic Signature
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...