Lucene search
+L

72 matches found

NVD
NVD
•added 2026/10/07 4:17 p.m.•8 views

CVE-2026-107207

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

7.2CVSS0.00289EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/07 3:24 p.m.•10 views

CVE-2026-107207 LMCache through 0.5.5 Missing Authentication in Frontend Node Catalog Allows SSRF Allowlist Bypass

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

7.2CVSS6AI score0.00289EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/07 3:24 p.m.•43 views

CVE-2026-107207 LMCache through 0.5.5 Missing Authentication in Frontend Node Catalog Allows SSRF Allowlist Bypass

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

7.2CVSS0.00289EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/07 3:24 p.m.•13 views

CVE-2026-107207

LMCache versions through 0.5.5 are vulnerable to a server-side request forgery (SSRF) vulnerability in the frontend monitoring service. Due to missing authentication in the frontend node catalog, unauthenticated attackers can register arbitrary hosts via POST /api/proxies . Once registered, these...

7.2CVSS6AI score0.00289EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/07 3:24 p.m.•10 views

EUVD-2026-94386

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

7.2CVSS6AI score0.00289EPSS
SaveExploits0References5
OSV
OSV
•added 2026/10/07 3:24 p.m.•6 views

CVE-2026-107207 LMCache through 0.5.5 Missing Authentication in Frontend Node Catalog Allows SSRF Allowlist Bypass

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

6.9CVSS6.1AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•7 views

PT-2026-107565

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

7.2CVSS6AI score0.00289EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/07 12:00 a.m.•7 views

CVE-2026-14297: Out-of-bounds Write

A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service CGMS Record Access Control Point RACP write handler allows an authenticated BLE peer to overflow a 20-byte static buffer into adjacent BSS memory. The exploitable impact cannot be predetermined - it is entirely dependent on...

8.7CVSS6.1AI score0.00155EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/14 5:28 p.m.•42 views

Malicious code in monitoring-service-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb0e7dea7e0302bc22488fbaf436dd36c0763f05ef494977822e8a1b7b3a1ab The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

6.1AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/14 5:28 p.m.•16 views

Malicious Package

Overview monitoring-service-util is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS6.1AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/14 5:28 p.m.•20 views

Malicious Package

Overview monitoring-service is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.1AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/14 5:28 p.m.•36 views

Malicious code in monitoring-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b39cb760b9b8a911efb3acc8389158d2a679ff9eb104da35496a6cccb1df6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.1AI score
SaveExploits0References1
OSV
OSV
•added 2026/07/14 5:28 p.m.•19 views

MAL-2026-10597 Malicious code in monitoring-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b39cb760b9b8a911efb3acc8389158d2a679ff9eb104da35496a6cccb1df6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/09 12:00 a.m.•33 views

PT-2026-56927

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 21.2R3-S8 Junos OS versions 21.4 through 21.4R3-S7 Junos OS versions 22.1 through 22.1R3-S6 Junos OS versions 22.2 through 22.2R3-S4 Junos OS versions 22.3 through 22.3R3-S3 Junos OS versions 22.4 through 22.4R3-S2...

5.3CVSS5.5AI score0.00367EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/06/17 12:00 a.m.•23 views

The vulnerability of the Windows Hotpatch Monitoring Service, a monitoring service for Windows operating systems, allows a perpetrator to increase their privileges.

The vulnerability of the Windows Hotpatch Monitoring Service in operating systems lies in its buffer overflow attacks. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS6AI score0.00333EPSS
SaveExploits0References2Affected Software5
CVE
CVE
•added 2026/06/09 5:05 p.m.•99 views

CVE-2026-42910

CVE-2026-42910 describes an out-of-bounds write in Windows Hotpatch Monitoring Service that enables a locally authenticated attacker to elevate privileges. According to the records, the impact is local with high severity (CVSS v3.1: AVLOCAL, ACLOW, PRLOW, UI NONE, S U, C I A H). The exploitation ...

7.8CVSS7.2AI score0.00333EPSS
SaveExploits0References1Affected Software4
Vulnrichment
Vulnrichment
•added 2026/06/09 5:05 p.m.•22 views

CVE-2026-42910 Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability

...

7.8CVSS7.3AI score0.00333EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/09 5:05 p.m.•47 views

CVE-2026-42910 Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability

...

7.8CVSS0.00333EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/09 5:05 p.m.•44 views

EUVD-2026-35576

Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.4AI score0.00333EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•48 views

PT-2026-47889

Name of the Vulnerable Software and Affected Versions Windows Hotpatch Monitoring Service affected versions not specified Description An out-of-bounds write in the Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally. An out-of-bounds write occurs when a program...

7.8CVSS5.5AI score0.00333EPSS
SaveExploits0References6
Rows per page
Query Builder