Lucene search
+L

45781 matches found

Positive Technologies
Positive Technologies
added 6 days ago14 views

PT-2026-67394

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new from xml reads assertion identity with document-wide XPath instead of the signed subtree. new from xml reads the NameID, attribute values, SessionIndex, audience and other identity...

5.6AI score0.00196EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 6 days ago11 views

PT-2026-67421

XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. get signed xml in lib/XML/Sig.pm, called from verify, resolves the SignedInfo Reference/@URI to a node with the XPath expression "//@ID='$id'" and returns the first node of the resulting node set. A document in whic...

5.5AI score0.00167EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 6 days ago15 views

PT-2026-67426

XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic check. verify in lib/XML/Sig.pm counts the //dsig:Signature elements into $numsigs and iterates over them, but two paths reach...

5.4AI score0.00191EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 6 days ago13 views

PT-2026-67145

A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown function of the component Config Import. Executing a manipulation of the argument Password can lead to os command injection. The attack may be launched remotely. This attack is characterized by high...

7.7CVSS6.6AI score0.01256EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 6 days ago14 views

PT-2026-67482

A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.set peer of the file /cgi-bin/glc of the component wg-server.so Native Plugin. The manipulation of the argument public key leads to command injection. Remote exploitation of the attack is...

10CVSS7.3AI score0.01989EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 6 days ago7 views

Linux Distros Unpatched Vulnerability : CVE-2026-69149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, a...

8.6CVSS5.5AI score0.0034EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added last week12 views

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in log4j core (CVE-2026-34477, CVE-2026-34478)

Summary IBM Db2 Developer Extension is affected by vulnerability in log4j core CVE-2026-34477, CVE-2026-34478 Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The fix for CVE-2025-68161 https://logging.apache.org/security.htmlCVE-2025-68161 was incomplete: it addressed hostname verificatio...

7.5CVSS6.5AI score0.00831EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added last week9 views

CVE-2026-64446

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. A local user can exploit this vulnerability by supplying a crafted Wi-Fi Protected Access WPA Information Element IE during a connection request. This can lead to a one-byte heap buffer overflow, potentially causing memory corruption...

5.7AI score0.00195EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added last week25 views

Exploit for CVE-2026-9811

CVE-2026-9811 CVE-2026-9811 is a Stored Cross-Site Scripting...

5.4CVSS5.8AI score0.00133EPSS
SaveExploits1
NVD
NVD
added last week8 views

CVE-2026-14817

The Element Pack Addons for Elementor WordPress plugin before 8.7.13 does not sanitize option values passed through certain data attributes before a bundled front-end library re-parses and renders them in the browser, allowing users with contributor-level access or higher to inject arbitrary...

6.8CVSS0.0029EPSS
SaveExploits0References1
EUVD
EUVD
added last week14 views

EUVD-2026-51941

The Element Pack Addons for Elementor WordPress plugin before 8.7.13 does not sanitize option values passed through certain data attributes before a bundled front-end library re-parses and renders them in the browser, allowing users with contributor-level access or higher to inject arbitrary...

5.6AI score0.0029EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added last week7 views

CVE-2026-14817

The Element Pack Addons for Elementor WordPress plugin before 8.7.13 does not sanitize option values passed through certain data attributes before a bundled front-end library re-parses and renders them in the browser, allowing users with contributor-level access or higher to inject arbitrary...

5.6AI score0.0029EPSS
SaveExploits0References1
CVE
CVE
added last week31 views

CVE-2026-14817

The CVE-2026-14817 affects the Element Pack Addons for Elementor WordPress plugin (pre-8.7.13). The root cause is lack of sanitization of option values passed through certain data attributes before a bundled front-end library re-parses and renders them in the browser, enabling DOM-based stored XS...

6.8CVSS5.6AI score0.0029EPSS
SaveExploits0References1
Patchstack
Patchstack
added last week7 views

WordPress Element Pack Addons for Elementor plugin < 8.7.13 - Contributor+ DOM-Based Stored XSS vulnerability

Contributor+ DOM-Based Stored XSS vulnerability discovered by Pierre Rudloff in WordPress Plugin Element Pack Elementor Addons versions 8.7.13...

6.8CVSS5.4AI score0.0029EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added last week4 views

CVE-2026-14817 Element Pack Elementor Addons < 8.7.13 - Contributor+ DOM-Based Stored XSS via uikit Data Attributes

The Element Pack Addons for Elementor WordPress plugin before 8.7.13 does not sanitize option values passed through certain data attributes before a bundled front-end library re-parses and renders them in the browser, allowing users with contributor-level access or higher to inject arbitrary...

5.6AI score0.0029EPSS
SaveExploits0References1
Cvelist
Cvelist
added last week41 views

CVE-2026-14817 Element Pack Elementor Addons < 8.7.13 - Contributor+ DOM-Based Stored XSS via uikit Data Attributes

The Element Pack Addons for Elementor WordPress plugin before 8.7.13 does not sanitize option values passed through certain data attributes before a bundled front-end library re-parses and renders them in the browser, allowing users with contributor-level access or higher to inject arbitrary...

0.0029EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/02 12:0 a.m.12 views

PT-2026-67047

The Element Pack Addons for Elementor WordPress plugin before 8.7.13 does not sanitize option values passed through certain data attributes before a bundled front-end library re-parses and renders them in the browser, allowing users with contributor-level access or higher to inject arbitrary...

5.6AI score0.0029EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/08/01 9:1 p.m.45 views

iwd-security-poc

iwd 3.12 — four Wi-Fi parser/handler bugs Proof-of-concept co...

6AI score
SaveExploits0
OSV
OSV
added 2026/08/01 4:44 p.m.15 views

OESA-2026-3204 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Use devmkmemdup in rtwsetsupportedband Simplify the code by using device managed memory allocations. This also fixes a memory leak in rtwregisterhw...

9.8CVSS6.1AI score0.00908EPSS
SaveExploits7References73
NVD
NVD
added 2026/08/01 1:16 p.m.5 views

CVE-2026-10773

The DHCPv4 client helper netdhcpv4msgtypename in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char name table after a faulty bounds check. The guard used msgtype = sizeofname instead of msgtype = ARRAYSIZEname; sizeof returns the byte size of the pointer array 32 on 32-bit, 64 ...

5.4CVSS0.00181EPSS
SaveExploits1References2
Rows per page
Query Builder