Lucene search
+L

16865 matches found

GithubExploit
GithubExploit
added 2026/05/01 8:4 p.m.164 views

copyfail

Copy Fail TL;DR $ curl https://git.dc09.xyz/DarkCat09/...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/05/01 8:3 p.m.11 views

CVE-2026-31705

A flaw was found in the ksmbd component of the Linux kernel. This out-of-bounds write vulnerability occurs when processing Server Message Block SMB extended attribute EA information. Specifically, the smb2getea function performs an unconditional memory write for alignment padding without checking...

9.8CVSS6.2AI score0.00389EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/01 12:16 p.m.7 views

CVE-2026-3772

The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2. This is due to missing nonce verification in the 'addpluginspage' and 'addthemespage' functions. This makes it possible for unauthenticated attackers to overwrite arbitrar...

8.8CVSS0.00168EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/05/01 11:18 a.m.21 views

EUVD-2026-26497

The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2. This is due to missing nonce verification in the 'addpluginspage' and 'addthemespage' functions. This makes it possible for unauthenticated attackers to overwrite arbitrar...

8.8CVSS5.9AI score0.00168EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/01 11:18 a.m.9 views

CVE-2026-3772 WP Editor <= 1.2.9.2 - Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File Editor

The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2. This is due to missing nonce verification in the 'addpluginspage' and 'addthemespage' functions. This makes it possible for unauthenticated attackers to overwrite arbitrar...

8.8CVSS5.9AI score0.00168EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/05/01 11:18 a.m.55 views

CVE-2026-3772 WP Editor <= 1.2.9.2 - Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File Editor

The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2. This is due to missing nonce verification in the 'addpluginspage' and 'addthemespage' functions. This makes it possible for unauthenticated attackers to overwrite arbitrar...

8.8CVSS0.00168EPSS
SaveExploits0References4
CVE
CVE
added 2026/05/01 11:18 a.m.40 views

CVE-2026-3772

The CVE-2026-3772 entry concerns the WP Editor WordPress plugin. A CSRF vulnerability exists in all versions up to and including 1.2.9.2 due to missing nonce verification in the add_plugins_page and add_themes_page functions. This can allow unauthenticated attackers to overwrite arbitrary plugin ...

8.8CVSS5.9AI score0.00168EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/01 12:0 a.m.23 views

PT-2026-36318

Name of the Vulnerable Software and Affected Versions WP Editor versions prior to 1.2.9.3 Description The WP Editor plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF, a flaw where an attacker tricks a victim into performing actions they did not intend to. This occurs because...

8.8CVSS5.9AI score0.00168EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/01 12:0 a.m.16 views

PT-2026-36519

Name of the Vulnerable Software and Affected Versions agl-service-can-low-level affected versions not specified Description A stack buffer overflow exists in the uds-c library. The send diagnostic request function in uds.c allocates a 6-byte stack buffer but copies up to 7 bytes via memcpy at an...

7.5CVSS6.3AI score0.00314EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/01 12:0 a.m.20 views

CVE-2026-42485

CVE-2026-42485 affects AGL agl-service-can-low-level, specifically the uds-c library. The send_diagnostic_request function in uds.c allocates a 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOAD_SIZE) but copies up to 7 bytes (MAX_UDS_REQUEST_PAYLOAD_LENGTH) via memcpy at an offset of 1+pid_length, caus...

7.5CVSS6AI score0.00314EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/01 12:0 a.m.21 views

WordPress plugin WP Editor 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.8CVSS5.7AI score0.00168EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/01 12:0 a.m.9 views

CVE-2026-37530

AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library. The senddiagnosticrequest function in uds.c allocates a 6-byte stack buffer MAXDIAGNOSTICPAYLOADSIZE=6 but copies up to 7 bytes MAXUDSREQUESTPAYLOADLENGTH=7 via memcpy at an offset of 1+pidlength 2-3...

7.5CVSS6AI score0.00402EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/05/01 12:0 a.m.21 views

EUVD-2026-26698

AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library. The senddiagnosticrequest function in uds.c allocates a 6-byte stack buffer MAXDIAGNOSTICPAYLOADSIZE=6 but copies up to 7 bytes MAXUDSREQUESTPAYLOADLENGTH=7 via memcpy at an offset of 1+pidlength 2-3 bytes,...

7.5CVSS6AI score0.00314EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/01 12:0 a.m.42 views

CVE-2026-37530

AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library. The senddiagnosticrequest function in uds.c allocates a 6-byte stack buffer MAXDIAGNOSTICPAYLOADSIZE=6 but copies up to 7 bytes MAXUDSREQUESTPAYLOADLENGTH=7 via memcpy at an offset of 1+pidlength 2-3...

0.00402EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/01 12:0 a.m.33 views

CVE-2026-37530

CVE-2026-37530 affects AGL’s agl-service-can-low-level up to version 17.1.12. The uds-c library contains a stack buffer overflow in the send_diagnostic_request function: it allocates a 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOAD_SIZE=6) but copies up to 7 bytes (MAX_UDS_REQUEST_PAYLOAD_LENGTH=7) ...

7.5CVSS6AI score0.00402EPSS
SaveExploits0References2Affected Software1
GithubExploit
GithubExploit
added 2026/04/30 3:18 p.m.191 views

Exploit for CVE-2026-31431

copyFail.py — CVE Exploit Analysis Report Summary copyFa...

7.8CVSS6.4AI score0.99907EPSS
SaveExploits238
RedhatCVE
RedhatCVE
added 2026/04/30 1:18 p.m.12 views

CVE-2026-38993

A flaw was found in Cockpit. This vulnerability, identified as a directory traversal, allows authenticated attackers to write files to arbitrary locations within the uploads directory or overwrite existing assets with malicious versions. The exploitation occurs via the Buckets component. This cou...

8.1CVSS5.5AI score0.00836EPSS
SaveExploits0References5
OSV
OSV
added 2026/04/30 8:42 a.m.13 views

CLSA-2026-1777538564 dmidecode: Fix of CVE-2023-30630

CVE-2023-30630: do not let --dump-bin overwrite an existing file...

7.1CVSS7AI score0.00523EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
added 2026/04/30 12:0 a.m.13 views

VulnCheck KEV: CVE-2026-1890

The LeadConnector WordPress plugin before 3.0.22 does not have authorization in a REST route, allowing unauthenticated users to call it and overwrite existing data...

5.3CVSS5.3AI score0.00682EPSS
SaveIn wildExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/30 12:0 a.m.26 views

PT-2026-36169

Name of the Vulnerable Software and Affected Versions Secure Access client versions prior to 14.50 Description A buffer overflow exists in a message parsing function of the client. Attackers controlling a modified server can send a specially crafted packet to overwrite a small portion of memory,...

9.8CVSS6AI score0.00252EPSS
SaveExploits0References7
Rows per page
Query Builder