Lucene search
+L

663 matches found

CNNVD
CNNVD
added 2026/03/12 12:00 a.m.19 views

Hyperterse 安全漏洞

Hyperterse is an open-source declarative framework developed by Hyperterse for building high-performance MCP servers. Versions of Hyperterse prior to v2.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the search tool returning the original SQL queries, which could expos...

6.5CVSS5.8AI score0.00178EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/10 7:08 p.m.13 views

EUVD-2026-10803

Envoy is a high-performance edge/middle/service proxy. Prior to 1.37.1, 1.36.5, 1.35.8, and 1.34.13, calling Utility::getAddressWithPort with a scoped IPv6 addresses causes a crash. This utility is called in the data plane from the originalsrc filter and the dns filter. This vulnerability is fixe...

5.9CVSS5.8AI score0.00388EPSS
SaveExploits1References1
OSV
OSV
added 2026/03/10 6:16 p.m.12 views

GHSA-3CW6-2J68-868P Envoy vulnerable to crash for scoped ip address during DNS

Summary Calling Utility::getAddressWithPort with a scoped IPv6 addresses causes a crash. This utility is called in the data plane from the originalsrc filter and the dns filter. Details The crashing function is Utility::getAddressWithPort. The crash occurs if a string containing a scoped IPv6...

5.9CVSS5.8AI score0.00388EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2026/03/10 6:16 p.m.16 views

Envoy vulnerable to crash for scoped ip address during DNS

Summary Calling Utility::getAddressWithPort with a scoped IPv6 addresses causes a crash. This utility is called in the data plane from the originalsrc filter and the dns filter. Details The crashing function is Utility::getAddressWithPort. The crash occurs if a string containing a scoped IPv6...

7.5CVSS5.8AI score0.00388EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/10 12:00 a.m.9 views

PT-2026-24615

Summary Calling Utility::getAddressWithPort with a scoped IPv6 addresses causes a crash. This utility is called in the data plane from the original src filter and the dns filter. Details The crashing function is Utility::getAddressWithPort. The crash occurs if a string containing a scoped IPv6...

5.9CVSS5.8AI score
SaveExploits0References3
Packet Storm
Packet Storm
added 2026/03/10 12:00 a.m.134 views

📄 Voyager 1.8.0 Arbitrary File Upload

Voyager version 1.8.0 has an issue where an attacker with minimal privileges any role allowed to upload images in a Rich Text Box can upload a polyglot file masquerading as an image while embedding server-side executable code...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/03/08 6:46 p.m.146 views

purplex

Other Stores...

5.8AI score
SaveExploits0
UbuntuCve
UbuntuCve
added 2026/02/24 3:21 p.m.12 views

CVE-2026-3102

A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be...

8.8CVSS6.5AI score0.03749EPSS
SaveExploits2References8
CNNVD
CNNVD
added 2026/02/24 12:00 a.m.17 views

exiftool 操作系统命令注入漏洞

Exiftool is an open-source application developed by ExifTool. It makes metadata more accessible. Versions of Exiftool 13.49 and earlier had a vulnerability related to operating system command injection. This vulnerability stemmed from the SetMacOSTags function in the PNG file parser component,...

8.8CVSS6.8AI score0.03749EPSS
SaveExploits2References7
Positive Technologies
Positive Technologies
added 2026/02/24 12:00 a.m.22 views

PT-2026-21764

Name of the Vulnerable Software and Affected Versions exiftool versions prior to 13.50 Description An OS command injection issue exists in the PNG File Parser component of exiftool on macOS. The flaw is located in the SetMacOSTags function within the lib/Image/ExifTool/MacOS.pm file. A remote...

8.8CVSS7.4AI score0.03749EPSS
SaveExploits2References39
Veracode
Veracode
added 2026/02/09 8:52 p.m.16 views

Sensitive Information Disclosure

openmage/magento-lts is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper handling of the X-Original-Url header in certain configurations, which allows an attacker to discover the admin URL without prior knowledge of its location...

5.3CVSS5.5AI score0.003EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/06 1:25 a.m.14 views

CVE-2026-25523

Magento-lts is a long-term support alternative to Magento Community Edition CE. Prior to version 20.16.1, the admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. This issue has been patched in version 20.16.1...

5.3CVSS5.3AI score0.003EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/04 10:15 p.m.47 views

CVE-2026-25523

Magento-lts is a long-term support alternative to Magento Community Edition CE. Prior to version 20.16.1, the admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. This issue has been patched in version 20.16.1...

5.3CVSS0.003EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/04 9:21 p.m.9 views

CVE-2026-25523 Magento's X-Original-Url header can expose admin url

Magento-lts is a long-term support alternative to Magento Community Edition CE. Prior to version 20.16.1, the admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. This issue has been patched in version 20.16.1...

5.3CVSS5.4AI score0.003EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/04 9:21 p.m.13 views

CVE-2026-25523

Magento-lts is a long-term support alternative to Magento Community Edition CE. Prior to version 20.16.1, the admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. This issue has been patched in version 20.16.1...

5.3CVSS5.4AI score0.003EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/02/04 9:21 p.m.44 views

CVE-2026-25523

Magento-lts versions prior to 20.16.1 are affected: the admin URL can be discovered without prior knowledge by exploiting the X-Original-Url header in certain configurations. The root cause is exposure via the X-Original-Url header; patches exist and are applied in version 20.16.1. Several connec...

5.3CVSS5.4AI score0.003EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/02/04 9:21 p.m.15 views

CVE-2026-25523 Magento's X-Original-Url header can expose admin url

Magento-lts is a long-term support alternative to Magento Community Edition CE. Prior to version 20.16.1, the admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. This issue has been patched in version 20.16.1...

5.3CVSS5.5AI score
SaveExploits0References4
OSV
OSV
added 2026/02/02 11:12 p.m.17 views

GHSA-JG68-VHV3-9R8F Magento's X-Original-Url header can expose admin url

Impact The admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. Patches The bug comes from the Zend library and is patche by unsetting the header in the bootstrap process. Workarounds Unset the X-Original-Url header i...

5.3CVSS5.4AI score0.003EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/02/02 11:12 p.m.22 views

Magento's X-Original-Url header can expose admin url

Impact The admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. Patches The bug comes from the Zend library and is patche by unsetting the header in the bootstrap process. Workarounds Unset the X-Original-Url header i...

5.3CVSS5.4AI score0.003EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
added 2026/02/02 11:12 p.m.6 views

Information Exposure

Overview openmage/magento-lts is a This repository is the home of an unofficial community-driven project. Affected versions of this package are vulnerable to Information Exposure via the X-Original-Url header. An attacker can obtain sensitive information about the administrative interface locatio...

6.9CVSS5.8AI score0.003EPSS
SaveExploits0References2
Rows per page
Query Builder