Lucene search
+L

10 matches found

Kitploit
Kitploit
added 2026/08/25 8:49 p.m.2 views

Instagram-Crawler

Instagram-Crawler Non API. Recupera post foto, like, commenti, data... per nome utente, hashtag Installazione 1. Assicurati di avere il browser Chrome installato. 2. Scarica chromedriver e mettilo nella cartella driver: ./driver/chromedriver 3. Installa i requisiti pip install -r requirements.txt...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/07/27 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-13059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due ...

8.6CVSS5.4AI score0.00384EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/22 8:16 p.m.10 views

CVE-2026-13059

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

8.6CVSS0.00384EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/22 8:16 p.m.8 views

UBUNTU-CVE-2026-13059

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

8.6CVSS5.9AI score0.00384EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/22 7:21 p.m.36 views

CVE-2026-13059 Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

8.6CVSS0.00384EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/22 7:21 p.m.11 views

CVE-2026-13059 Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

8.6CVSS5.5AI score
SaveExploits0References3
CVE
CVE
added 2026/07/22 7:21 p.m.71 views

CVE-2026-13059

Technical details are not publicly available in the provided documents. No specific affected products, versions, or exploit vectors are stated here. Monitor for updates as new information may emerge.

8.6CVSS5.3AI score0.00384EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/22 7:21 p.m.10 views

CVE-2026-13059

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

8.6CVSS5.3AI score0.00384EPSS
SaveExploits0References2Affected Software1
MongoDB
MongoDB
added 2026/07/22 7:21 p.m.14 views

Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

8.6CVSS5.3AI score0.00384EPSS
SaveExploits0References1Affected Software1
Atlassian
Atlassian
added 2014/03/14 12:35 a.m.23 views

User avatar upload endpoint is vulnerable to XSRF

Stash, as 2.12, will allows users to upload local avatars to their account STASHDEV-6182. That upload is submitted to a non-API end point that accepts a POST request with the avatar as data-uri|https://en.wikipedia.org/wiki/DataUri. Currently, because the form is submitted by AJAX, the end point ...

1.3AI score
SaveExploits0
Rows per page
Query Builder