Lucene search
+L

136276 matches found

IBM Security Bulletins
IBM Security Bulletins
added 4 days ago6 views

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM WebSphere Hybrid Edition, are affected by a server-side request forgery vulnerability (CVE-2026-14529)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM WebSphere Hybrid Edition, are affected by a server-side request forgery vulnerability when sipServlet-1.1 is enabled. Vulnerability Details Refer to the security bulletins listed in the...

9.8CVSS5.5AI score0.0036EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 4 days ago6 views

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditiona...

8.1CVSS7.8AI score0.00463EPSS
SaveExploits1Affected Software1
GithubExploit
GithubExploit
added 4 days ago17 views

Exploit for Out-of-bounds Write in Samsung Android

--- CVE-2026-21018 – OPC UA Authentication Bypass via None S...

6.8CVSS5.6AI score0.00155EPSS
SaveExploits2
GithubExploit
GithubExploit
added 4 days ago18 views

Exploit for CVE-2026-21014

--- CVE-2026-21014 – CAN Bus Frame Replay Attack on Automoti...

5.1CVSS5.7AI score0.00085EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
added 4 days ago5 views

Security Bulletin: Multiple Vulnerabilities in IBM Tivoli Netcool/OMNIbus WebGUI (CVE-2026-59879, CVE-2026-59880)

Summary IBM Tivoli Netcool/OMNIbus WebGUI includes the Immutable.js library for persistent immutable data structures used in the client-side UI. Vulnerabilities have been identified in this library that could affect the product. Vulnerability Details CVEID:CVE-2026-59879 DESCRIPTION: Immutable.js...

8.7CVSS7.2AI score0.00438EPSS
SaveExploits2Affected Software1
GithubExploit
GithubExploit
added 4 days ago20 views

Exploit for CVE-2026-21006

--- CVE-2026-21006 – Zigbee Light Link Factory Reset Exploit...

4.7CVSS5.7AI score0.00125EPSS
SaveExploits1
GithubExploit
GithubExploit
added 4 days ago20 views

bxploit

BXPLOIT AI-Powered Penetration Testing Framework built on Kim...

5.9AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 4 days ago7 views

Security Bulletin: Multiple Vulnerabilities in IBM API Connect

Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.11 Vulnerability Details CVEID:CVE-2020-28851 DESCRIPTION: In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. x/text/language is supposed to...

7.5CVSS8.1AI score0.06531EPSS
SaveExploits5Affected Software1
Amazon
Amazon
added 4 days ago5 views

Important: unbound

Issue Overview: In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cache poisoning that permits a malicious actor controlling a single delegated zone to...

7.5CVSS5.6AI score0.00254EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 4 days ago8 views

Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2014)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2014 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6output CVE-2025-40158 In the Linux kernel, the following vulnerability has been resolved: gpio: Fix...

9.8CVSS6.3AI score0.00529EPSS
SaveExploits0References82
Tenable Nessus
Tenable Nessus
added 4 days ago6 views

Amazon Linux 2023 : python3-unbound, unbound, unbound-anchor (ALAS2023-2026-2033)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2033 advisory. In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found in Unbound that could extend the...

9.3CVSS5.7AI score0.00254EPSS
SaveExploits0References28
Tenable Nessus
Tenable Nessus
added 4 days ago8 views

Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2026-2040)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2040 advisory. BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.This issue affects BIND 9 versions 9.18.0 through 9.18.50,...

8.6CVSS5.6AI score0.00509EPSS
SaveExploits0References18
Zero Science Lab
Zero Science Lab
added 4 days ago8 views

LightFTP Server 2.3.1 Race Condition

Summary Small x86-32/x64 FTP Server. Description LightFTP 2.3.1 contains a residual race condition an incomplete fix for CVE-2024-11144 in the workerthreadcleanup function of ftpserv.c. The control thread reads and acts on shared per-connection state, including the worker thread id it then passes...

9.2CVSS5.6AI score0.00333EPSS
SaveExploits3
Amazon
Amazon
added 4 days ago5 views

Important: dotnet10.0

Issue Overview: Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47300 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

9.8CVSS7.6AI score0.01105EPSS
SaveExploits0
Amazon
Amazon
added 4 days ago4 views

Important: unbound

Issue Overview: In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cache poisoning that permits a malicious actor controlling a single delegated zone to...

7.5CVSS5.6AI score0.00254EPSS
SaveExploits0
Amazon
Amazon
added 4 days ago7 views

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6output CVE-2025-40158 In the Linux kernel, the following vulnerability has been resolved: gpio: Fix resource leaks on errors in gpiochipadddatawithkey CVE-2026-31732 In the Linux kernel, the...

9.8CVSS6.4AI score0.00529EPSS
SaveExploits0
Amazon
Amazon
added 4 days ago7 views

Important: unbound

Issue Overview: In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found in Unbound that could extend the ghost domain window by up to one cached TTL configured value for A/AAAA glue records...

9.3CVSS5.6AI score0.00254EPSS
SaveExploits0
Amazon
Amazon
added 4 days ago6 views

Important: bind

Issue Overview: BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and...

8.6CVSS5.5AI score0.00509EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 4 days ago6 views

SUSE SLES15 Security Update : bind (SUSE-SU-2026:3452-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3452-1 advisory. - CVE-2026-10723: accepting incorrect child-zone NSEC3 records as valid can allow an attacker to forge authenticated NXDOMAIN...

8.6CVSS5.6AI score0.00509EPSS
SaveExploits0References25
Tenable Nessus
Tenable Nessus
added 4 days ago6 views

Amazon Linux 2023 : aspnetcore-runtime-10.0, aspnetcore-runtime-dbg-10.0, aspnetcore-targeting-pack-10.0 (ALAS2023-2026-2009)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2009 advisory. Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47300 Allocation of resources without limits o...

9.8CVSS7.5AI score0.01105EPSS
SaveExploits0References36
Rows per page
Query Builder