Lucene search
+L

138501 matches found

Microsoft KB
Microsoft KB
added 2026/07/14 12:00 a.m.247 views

July 14, 2026-KB5102203 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2026/07/14 12:00 a.m.126 views

July 14, 2026-KB5102202 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2026/07/14 12:00 a.m.471 views

July 14, 2026-KB5102201 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019

None None...

6.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:00 a.m.19 views

Security Update for Microsoft ASP.NET Core (July 2026)

The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate...

8.8CVSS5.5AI score0.00736EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:00 a.m.12 views

openSUSE 16: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (openSUSE-SU-2026:21308-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21308-1 advisory. This update for php8 fixes the following issues - Update to versio 8.4.23 - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL...

5.6CVSS6.2AI score0.00279EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.13 views

PT-2026-58935

Impact The web handler renderMobileBundle internal/web/handlers.go:1325 passes the real pki.CAResolver directly into mobilebundle.Build. Inside Build internal/mobilebundle/builder.go:54, resolver.LoadByID decrypts the CA's ed25519 private key into a pki.CAManager, but Build never calls...

8.7CVSS6.2AI score
SaveExploits0References5
Zero Science Lab
Zero Science Lab
added 2026/07/14 12:00 a.m.57 views

SIP Sustainable Irrigation Platform 5.x (cli_control) Remote Code Execution

Summary SIP is a free Raspberry Pi based Python program for controlling irrigation systems sprinkler, drip, hydroponic, etc. It uses web technology to provide an intuitive user interface UI in several languages. The UI can be accessed in your favorite browser on desktop, laptop, and mobile device...

9.8CVSS6.1AI score0.02766EPSS
SaveExploits2
ICS
ICS
added 2026/07/14 12:00 a.m.22 views

Siemens SIDIS Secured SmartPlug

SUMMARY SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below. Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version. 2. GENERAL...

7.4AI score
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.28 views

PT-2026-58343

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description An incorrect implementation of the authentication algorithm in the Windows SMB Server allows an authorized attacker to elevate privileges over a network. Recommendations At the...

9CVSS6.1AI score0.00526EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.25 views

PT-2026-58040

A security issue exists within FactoryTalk® Services Platform FTSP, allowing an attacker to bypass JWT signature validation during Okta Web Authentication. The vulnerability stems from the application not verifying that the JWT algorithm is configured for RSA, enabling an attacker to set the...

8.8CVSS6.1AI score0.00113EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.13 views

PT-2026-59002

Summary OpenCost contains an unauthenticated file write vulnerability in the /serviceKey endpoint that allows remote attackers to overwrite the GCP service account key file without authentication. This can lead to service disruption, credential theft, and potential privilege escalation within...

8.8CVSS6.2AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.7 views

PT-2026-58967

Summary Anyquery's server mode does not restrict outbound HTTP requests initiated by its built-in SQLite virtual table modules e.g., json reader, log reader. Unauthenticated attackers connecting to the MySQL-compatible server port can create virtual tables pointing to internal network endpoints o...

8.6CVSS6.2AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:00 a.m.23 views

PT-2026-60066

Summary Live PoC verified 2026-04-30 against a stock FacturaScripts master at 127.0.0.1:8081. A low-privilege user lowpriv created a customer with nombre = "=SUM1+1cmd|/c calc!A1". An admin then exported ListCliente to CSV via ?action=export&option=CSV. The downloaded file contains the raw payloa...

8CVSS6.3AI score
SaveExploits0References3
Packet Storm
Packet Storm
added 2026/07/14 12:00 a.m.71 views

📄 SIP Sustainable Irrigation Platform 5.x Remote Code Execution

SIP Sustainable Irrigation Platform version 5.x executes user-configured operating-system commands when an irrigation station changes state, if the optional clicontrol plugin is installed and enabled. This can be exploited to run arbitrary commands on the affected host by storing a command throug...

6.2AI score
SaveExploits0
AlmaLinux
AlmaLinux
added 2026/07/14 12:00 a.m.10 views

Moderate: libsolv security update

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm. Security Fixes: libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVE-2026-48864 For more details about the security issues,...

7.8CVSS6.2AI score0.00227EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
added 2026/07/14 12:00 a.m.18 views

None: kernel bug fix and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Bug Fixes and Enhancements: XFS data corruption using reflink almalinux-9.8.z JIRA:AlmaLinux-193937...

5.9AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:00 a.m.10 views

EulerOS 2.0 SP10 : openssl (EulerOS-SA-2026-2706)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA...

8.1CVSS6.4AI score0.00885EPSS
SaveExploits0References5
Microsoft KB
Microsoft KB
added 2026/07/14 12:00 a.m.298 views

July 14, 2026-KB5102206 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2026/07/14 12:00 a.m.14 views

July 14, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5102205)

None None...

9.8CVSS6.1AI score0.01149EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2026/07/14 12:00 a.m.16 views

July 14, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5102204)

None None...

9.8CVSS6.1AI score0.01149EPSS
SaveExploits0
Rows per page
Query Builder