Lucene search
+L

11943 matches found

Kitploit
Kitploit
added 2026/08/31 7:27 a.m.3 views

sharingIsCaring

sharingIsCaring TwonkyMedia Server Pwnd CVE-2018-7171 Background information This is a GitHub repository keeping all relevant information about CVE-2018-7171. and more CVE-2018-7171 represents a directory/file traversal vulnerability in TwonkyMedia Server version 7.0.11-8.5 latest version...

7.5CVSS7.1AI score0.28419EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/30 7:58 p.m.5 views

CVE-2026-52617

CVE-2026-52617 — @sworddut/mcp-ffmpeg-helper: ffmpegツールオプションを介したOSコマンドインジェクション runFFmpegCommand は、MCPツールのパラメータから構築した文字列を spawn…, shell: true に渡すため、options、format、codec、pixelFormat、extraOptions に含まれるシェルのメタ文字が、サーバーを実行しているホスト上で実行されます。 ⚠ 修正版は存在しません 2026-08-22現在、最新のnpmリリースは 0.2.1 であり、これが影響を受ける...

5.9AI score
SaveExploits2
Snyk
Snyk
added 2026/08/24 2:07 a.m.7 views

CSV Injection

Overview exceljs is a package to Read, manipulate and write spreadsheet data and styles to XLSX and JSON. Affected versions of this package are vulnerable to CSV Injection through the CSV.write process in lib/csv/csv.js. An attacker can trigger spreadsheet formula execution by supplying a cell...

8.4CVSS6AI score0.00295EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/20 6:23 p.m.25 views

CVE-2026-63654

Frappe (full-stack web application framework) versions 16.31.0 and earlier contain a vulnerability in the frappe.model.workflow.bulk_workflow_approval endpoint in frappe/model/workflow.py. The whitelisted endpoint is not restricted to POST , meaning it accepts safe HTTP methods (e.g., GET) for st...

6.9CVSS5.4AI score0.00175EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/20 4:35 p.m.27 views

CVE-2026-55586

SumatraPDF 3.6.1 and earlier (Windows) contains a heap out-of-bounds write in the vendored CHMLib LZX decompressor. A crafted CHM file can supply malformed Huffman code lengths to make_decode_table in ext/CHMLib/lzx.c. In the long-code branch, internal nodes are written via next_symbol before val...

6.6CVSS6.4AI score0.00127EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/20 4:10 p.m.15 views

EUVD-2026-63480

LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, StdioServerParameters accepts the configur...

8.8CVSS6AI score0.0041EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/20 1:58 p.m.11 views

CVE-2026-64969 Insecure Direct Object Reference in ATutor

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

5.3CVSS5.6AI score
SaveExploits0References5
Circl
Circl
added 2026/08/19 9:01 p.m.14 views

CVE-2026-68900

creationtimestamp| type| source ---|---|--- 2026-08-19 21:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthmtw75wv2t...

7.6CVSS4.8AI score0.00252EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/17 1:40 p.m.9 views

MINI-8XH7-CQ46-FFRJ

Bulletin has no description...

6.1CVSS4.9AI score0.0031EPSS
SaveExploits0
OSV
OSV
added 2026/08/16 1:31 p.m.5 views

MINI-2X84-H83P-C75C

Bulletin has no description...

7.5CVSS4.8AI score0.00549EPSS
SaveExploits0
OSV
OSV
added 2026/08/16 1:31 p.m.7 views

MINI-J3JQ-W7RX-5XFR

Bulletin has no description...

5.9CVSS5AI score0.00518EPSS
SaveExploits0
OSV
OSV
added 2026/08/15 7:30 p.m.8 views

MINI-HWC4-M8C9-HHF8

Bulletin has no description...

7.5CVSS4.9AI score0.00568EPSS
SaveExploits0
CVE
CVE
added 2026/08/14 5:37 p.m.61 views

CVE-2026-73849

In CVE-2026-73849, Emlog (2.6.26 and earlier) allows unauthenticated reinstall via install.php?action=reinstall. The code path bypasses the already-installed guard when act != 'reinstall', letting a remote attacker submit hostname, dbuser, dbpasswd, dbname, dbprefix, username, password, and email...

9.8CVSS5.4AI score0.00484EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/08/14 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-56859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. CVE-2026-56859 Note that Nessus relies on...

7.5CVSS6AI score0.00568EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/14 12:00 a.m.13 views

PT-2026-72074

Name of the Vulnerable Software and Affected Versions Emlog versions prior to 2.6.27 Description The install.php endpoint allows the action parameter to be set to reinstall without authentication. This bypasses the installation check because the security guard only executes when the $act variable...

9.8CVSS5.3AI score0.00484EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70437

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

7.8CVSS5.4AI score0.00278EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70050

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to sufficiently sanitize certain request headers before forwarding traffic to internal components. This allows an unauthenticated attacker to send a specially crafte...

5.3CVSS5.2AI score0.00234EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.10 views

PT-2026-70388

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue exists where the allocation of resources occurs without limits or throttling, which allows an unauthorized attacker to cause a denial-of-service condition over a network...

7.5CVSS5.2AI score0.01126EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.9 views

PT-2026-70411

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A null pointer dereference in Windows TCP/IP allows an unauthorized attacker to cause a denial of service over a network. A null pointer dereference occurs when a program attempts to...

7.5CVSS5.2AI score0.01686EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70579

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

6.8CVSS6.5AI score0.0026EPSS
SaveExploits0References5
Rows per page
Query Builder