Lucene search
+L

3200 matches found

EUVD
EUVD
added 53 minutes ago2 views

EUVD-2026-53313

DjangoCRM's toggledefaultsorting view is the only route in common/urls.py that is not wrapped in loginrequired or staffmemberrequired, and it redirects to a caller-supplied nexturl GET parameter after only checking secureurlnexturl, which merely verifies the target host matches the current site's...

4.3CVSS5.5AI score
SaveExploits0References2
CVE
CVE
added 2 hours ago8 views

CVE-2026-71240

DjangoCRM exposes a vulnerability in the toggle_default_sorting view: it is the sole route in common/urls.py not wrapped by login_required or staff_member_required. The handler redirects to a caller-supplied next_url GET parameter after only validating secure_url(next_url) (which checks host agai...

4.3CVSS5.5AI score
SaveExploits0References1
Nuclei
Nuclei
added 10 hours ago28 views

Quiz and Survey Master <= 8.1.4 - SQL Injection

ExpressTech Quiz And Survey Master versions up to 8.1.4 contains an SQL injection caused by improper neutralization of special elements used in SQL commands, letting attackers execute arbitrary SQL queries, exploit requires user interaction. id: CVE-2023-28787 info: name: Quiz and Survey Master =...

9.3CVSS8.1AI score0.0196EPSS
SaveExploits0References3
Nuclei
Nuclei
added 10 hours ago43 views

SickChill - Open Redirect

SickChill's login endpoint's 'next' parameter accepts arbitrary content, allowing authenticated attackers to perform open redirects, but this was fixed in commit c7128a8946c3701df95c285810eb75b2de18bf82 by redirecting to a default page. id: CVE-2024-53995 info: name: SickChill - Open Redirect...

4.8CVSS5.6AI score0.0097EPSS
SaveExploits0References6
Nuclei
Nuclei
added 10 hours ago73 views

AxxonSoft Axxon Next - Local File Inclusion

AxxonSoft Axxon Next suffers from a local file inclusion vulnerability. id: CVE-2018-7467 info: name: AxxonSoft Axxon Next - Local File Inclusion author: 0xAkoko severity: high description: AxxonSoft Axxon Next suffers from a local file inclusion vulnerability. impact: | An attacker can read...

7.5CVSS7.2AI score0.10358EPSS
SaveExploits2References5
NVD
NVD
added yesterday8 views

CVE-2026-24078

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling...

6.5CVSS
SaveExploits0References1
OSV
OSV
added yesterday2 views

MAL-2026-11609 Malicious code in @onereach/or-browser-next (npm)

npm/@onereach/or-browser-next is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.6AI score
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday5 views

Malicious code in @onereach/or-browser-next (npm)

npm/@onereach/or-browser-next is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6AI score
SaveExploits0References8
OSV
OSV
added yesterday3 views

MAL-2026-11965 Malicious code in conv-context-next (npm)

npm/conv-context-next is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

5.6AI score
SaveExploits0References15
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday4 views

Malicious code in conv-context-next (npm)

npm/conv-context-next is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

5.7AI score
SaveExploits0References15
CVE
CVE
added yesterday7 views

CVE-2026-24078

Technical details about CVE-2026-24078 are not publicly available in the provided documents. Monitor for updates from official bulletins.

6.5CVSS5.4AI score
SaveExploits0References1
EUVD
EUVD
added yesterday4 views

EUVD-2026-52731

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling...

6.5CVSS5.4AI score
SaveExploits0References1
OSV
OSV
added yesterday13 views

ROOT-APP-NPM-CVE-2026-27979 CVE-2026-27979 in next - Patched by Root

Root has patched CVE-2026-27979 in the next package for Root:npm. Multiple fixed versions available...

7.5CVSS7.1AI score0.00667EPSS
SaveExploits0
OSV
OSV
added yesterday15 views

ROOT-APP-NPM-CVE-2026-27980 CVE-2026-27980 in next - Patched by Root

Root has patched CVE-2026-27980 in the next package for Root:npm. Multiple fixed versions available...

7.5CVSS5.4AI score0.00683EPSS
SaveExploits0
OSV
OSV
added yesterday15 views

ROOT-APP-NPM-CVE-2026-44579 CVE-2026-44579 in next - Patched by Root

Root has patched CVE-2026-44579 in the next package for Root:npm. Multiple fixed versions available...

7.5CVSS7.1AI score0.00712EPSS
SaveExploits1
OSV
OSV
added yesterday10 views

ROOT-APP-NPM-CVE-2026-44580 CVE-2026-44580 in next - Patched by Root

Root has patched CVE-2026-44580 in the next package for Root:npm. Multiple fixed versions available...

6.1CVSS6.3AI score0.00205EPSS
SaveExploits0
OSV
OSV
added yesterday23 views

ROOT-APP-NPM-CVE-2026-45109 CVE-2026-45109 in next - Patched by Root

Root has patched CVE-2026-45109 in the next package for Root:npm. Multiple fixed versions available...

7.5CVSS7.1AI score0.00556EPSS
SaveExploits0
OSV
OSV
added yesterday14 views

ROOT-APP-NPM-CVE-2026-44574 CVE-2026-44574 in next - Patched by Root

Root has patched CVE-2026-44574 in the next package for Root:npm. Multiple fixed versions available...

8.1CVSS7.4AI score0.00622EPSS
SaveExploits2
OSV
OSV
added yesterday16 views

ROOT-APP-NPM-CVE-2026-44581 CVE-2026-44581 in next - Patched by Root

Root has patched CVE-2026-44581 in the next package for Root:npm. Multiple fixed versions available...

4.7CVSS5.5AI score0.00222EPSS
SaveExploits1
OSV
OSV
added yesterday10 views

ROOT-APP-NPM-CVE-2026-44577 CVE-2026-44577 in next - Patched by Root

Root has patched CVE-2026-44577 in the next package for Root:npm. Multiple fixed versions available...

7.5CVSS7.1AI score0.00722EPSS
SaveExploits1
Rows per page
Query Builder