Lucene search
+L

10879 matches found

CVE
CVE
added 2026/09/18 5:41 a.m.42 views

CVE-2026-18912

ManageEngine DataSecurity Plus versions prior to 6310 are affected by an authenticated SQL injection vulnerability in the Reports module . An attacker with technician-level credentials can execute arbitrary SQL queries, leading to high confidentiality impact (data exfiltration) with a changed sco...

7.7CVSS0.015EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/18 5:37 a.m.10 views

EUVD-2026-82655

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication...

7.5CVSS0.01062EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/18 5:37 a.m.35 views

CVE-2026-18911

ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send requests without proper authentication...

7.5CVSS0.01062EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/18 5:37 a.m.14 views

CVE-2026-18911

ManageEngine DataSecurity Plus versions prior to 6310 are affected by an agent authentication bypass that allows unenrolled agents to send requests to the product without proper authentication. The vulnerability is scored CVSS 7.5 (High) with a network attack vector, high attack complexity, no re...

7.5CVSS0.01062EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 2:18 a.m.12 views

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539: ADSelfService Plus RCE Vulnerability 1. Vulnerability Description Zoho ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. CVE-2021-40539 Zoho ManageEngine...

9.8CVSS8.5AI score0.9896EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/17 10:59 p.m.12 views

CVE-2025-14364

CVE-2025-14364 Demo Importer Plus Authenticated Subscriber → Administrator viado-reinstall AJAX action 〔 1 〕 Vulnerability Root Cause: Ajax::handlerequest registers the demoimporterplus AJAX action without calling currentusercan. Any authenticated subscriber can send "demoaction":"do-reinstall" t...

8.8CVSS6AI score0.00352EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/17 10:55 p.m.10 views

CVE-2025-5688-FreeRTOS-Plus-TCP-Out-of-Bounds-Write

CVE-2025-5688 – FreeRTOS-Plus-TCP Out-of-Bounds Write Exploit Remote memory corruption / DoS / potential RCE trigger in FreeRTOS-Plus-TCP when processing overly long DNS names in LLMNR or mDNS queries Buffer Allocation Scheme 1. Exploit Author: Mohammed Idrees Banyamer Country: Jordan Instagram:...

7.5CVSS6.4AI score0.0035EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/17 1:52 a.m.13 views

cve-2026-6379

CVE-2026-6379 — WP Photo Album Plus :8080/?pageid=" --mode probe python3 ../pocs/exploit.py "http://:8080/?pageid=" --mode probe-calendar python3 ../pocs/exploit.py "http://:8080/?pageid=" --mode version python3 ../pocs/exploit.py "http://:8080/?pageid=" --mode hash 存在漏洞的目标对 SLEEP 探测的响应时间约为...

8.6CVSS6AI score0.00472EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/16 1:23 p.m.9 views

nginx-cve-2026-42945

CVE-2026-42945 NGINX Rift — defensive scanner Organizations running NGINX Open Source , NGINX Plus , or NGINX-based ingress/controllers should verify whether they are affected by CVE-2026-42945 and patch or reconfigure before exploitation attempts hit production edges. This repository provides a...

9.2CVSS8.1AI score0.68047EPSS
SaveExploits42
OSV
OSV
added 2026/09/16 11:16 a.m.6 views

DEBIAN-CVE-2026-89898

In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed...

8.8CVSS0.00321EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/16 11:16 a.m.6 views

CVE-2026-89898

In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed...

8.8CVSS0.00321EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/16 10:31 a.m.4 views

EUVD-2026-80498

In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed...

8.8CVSS5.8AI score0.00321EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/16 10:31 a.m.6 views

CVE-2026-89898 media: cec: extron-da-hd-4k-plus: add sanity check

In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed...

8.8CVSS5.8AI score
SaveExploits0References7
CVE
CVE
added 2026/09/16 10:31 a.m.10 views

CVE-2026-89898

CVE-2026-89898 affects the Linux kernel 's CEC (Consumer Electronics Control) media driver for the Extron DA HD 4K Plus device. The root cause is a missing sanity check that allows an overflow of the msg.msg[] buffer when malformed incoming data is processed. The CVSS 3.1 score is 8.8 (HIGH) with...

8.8CVSS5.8AI score0.00321EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/16 10:31 a.m.33 views

CVE-2026-89898 media: cec: extron-da-hd-4k-plus: add sanity check

In the Linux kernel, the following vulnerability has been resolved: media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed...

8.8CVSS0.00321EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 12:23 a.m.8 views

CVE-2019-12543

CVE-2019-12543 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in PurchaseRequest.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the PurchaseRequest.do serviceRequestId parameter. Author: Concobe of Tarantula Team - VinCSS ...

6.1CVSS6.4AI score0.06056EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/16 12:23 a.m.7 views

CVE-2019-12542

CVE-2019-12542 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SearchN.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SearchN.do userConfigID parameter. Author: Concobe of Tarantula Team - VinCSS a member of Vingroup...

6.1CVSS6.4AI score0.06029EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2026/09/16 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-89898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cec: extron-da-hd-4k-plus: add sanity check Add check to prevent overflowing msg.msg in case the incoming data is malformed. CVE-2026-89898 Note that...

8.8CVSS0.00321EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 9:30 p.m.11 views

CVE-2021-31159

Zoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration CVE-2021-31159 This script takes advantage of ServiceDesk Plus before build 10519 having different output in the password recovery functionality: if the user exists it returns a message claiming an email has been sent but ...

5.3CVSS6AI score0.17772EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/15 9:24 p.m.11 views

CVE-2024-10958-WPPA-Exploit

WordPress WP Photo Album Plus Arbitrary Shortcode Execution CVE-2024-10958 PoC code for unauthenticated arbitrary shortcode execution vulnerability in WordPress WP Photo Album Plus plugin. Details Affected Versions: = 8.8.08.007 CVSS Score: 7.3 High Vulnerability Type: Arbitrary Shortcode Executi...

7.3CVSS8.8AI score0.01644EPSS
SaveExploits1
Rows per page
Query Builder