exp-labs

exp-labs Cybersecurity Training Platform This modern web secu...

opencve v3.1.0

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

RHSA-2026:54757 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 security advisory

Bulletin has no description...

GO-2026-5247 vulnerabilities

Vulnerabilities for packages: vault-fips, vault, splunk-otel-collector, splunk-otel-collector-fips...

GO-2024-2697 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-5378 vulnerabilities

Vulnerabilities for packages: grype-db, kubescape-server, newrelic-infrastructure-agent-fips, opa-fips, helm-exporter-fips, chainctl, kubevela, containerd-fips, datadog-agent-fips, spegel, tigera-operator-fips, consul-k8s, syft, tw, chaos-mesh, helm-fips, kubevela-fips, skaffold-fips,...

GO-2025-3409 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: nuclei, gptscript, dataplaneapi, timoni...

CVE-2026-19764

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...

CVE-2026-19764 Raisecom Communication Command and Dispatch Management Platform getpwd.php sql injection

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...

CVE-2026-19764

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...

CVE-2026-19764

CVE-2026-19764 affects Raisecom’s Command and Dispatch Management Platform up to version 7.6.5. The vulnerability is in an unknown part of /app/users/getpwd.php where manipulating the sip argument causes SQL injection. The issue is exploitable remotely and public exploit code exists. References d...

CVE-2026-19764 Raisecom Communication Command and Dispatch Management Platform getpwd.php sql injection

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...

CVE-2026-73678: Improper Control of Generation of Code

MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST /api/v1/responses/ endpoint, which reaches the Anton agent...

SAP NetWeaver OS Command Injection (3745182)

The version of the SAP NetWeaver kernel detected on the remote host is affected by an OS command injection vulnerability as referenced in SAP Security Note 3745182: - SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls...

SAP NetWeaver AS ABAP Missing Authorization Check (3752864)

The version of SAP NetWeaver AS ABAP detected on the remote host is affected by a missing authorization check vulnerability as referenced in SAP Security Note 3752864: - SAP NetWeaver and ABAP Platform Change and Transport System - Customer Transport Integration Wizard allows a low-privileged use...

CVE-2026-19764: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...

PT-2026-72088

Name of the Vulnerable Software and Affected Versions MindsDB Minds Platform versions prior to 26.1.1 Description An unauthenticated remote code execution flaw allows attackers to execute arbitrary OS commands. The issue occurs when crafted prompts are submitted to the unprotected 'POST...

RHEL 8 : Red Hat OpenStack Platform 16.2 security advisory (Important) (RHSA-2026:54757)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54757 advisory. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service...

CVE-2026-73304

Budibase is an open-source low-code platform. Prior to 3.39.25, GET /api/users/metadata and GET /api/users/metadata/:id returned user objects processed by packages/server/src/utilities/global.ts without removing oauth2.accessToken or oauth2.refreshToken. A user with the POWER role could retrieve...