Lucene search
+L

33210 matches found

Nuclei
Nuclei
added 9 hours ago48 views

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

9.9CVSS6AI score0.36503EPSS
SaveExploits7References3
Nuclei
Nuclei
added 9 hours ago39 views

Apache NiFi - Information Disclosure

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

5.4CVSS5.8AI score0.0313EPSS
SaveExploits0
Nuclei
Nuclei
added 9 hours ago19 views

Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wpcapabilities user meta that defines a user's role. During the registration...

10CVSS8.5AI score0.08975EPSS
SaveExploits2References3
Nuclei
Nuclei
added 9 hours ago113 views

Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage

Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. id: CVE-2015-2080 info: name: Eclipse Jetty 9.2.9.v20150224 - Sensitive Information Leakage author: pikpikcu severity: high description: Eclip...

7.5CVSS7.6AI score0.74881EPSS
SaveExploits16References5
Positive Technologies
Positive Technologies
added 12 hours ago8 views

PT-2026-73069

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkout process.php. Executing a manipulation of the argument total count can lead to sql injection. The attack can be launched remotely. The exploit has been made available to t...

6.5CVSS6.5AI score
SaveExploits0References7
NVD
NVD
added yesterday4 views

CVE-2026-74270

In the Linux kernel, the following vulnerability has been resolved: handshake: Require admin permission for DONE command ACCEPT and DONE are the two downcalls of the handshake genl family, both intended for use by the trusted handshake agent tlshd. ACCEPT already requires GENLADMINPERM; DONE has ...

0.00168EPSS
SaveExploits0References5
NVD
NVD
added yesterday3 views

CVE-2026-72183

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCKSCOPESIGNAL bypass on the SIGIO path LANDLOCKSCOPESIGNAL must prevent a sandboxed process from signaling processes outside its Landlock domain. It can be bypassed through the asynchronous SIGIO delivery path...

0.00219EPSS
SaveExploits0References4
Cvelist
Cvelist
added yesterday13 views

CVE-2026-72183 landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCKSCOPESIGNAL bypass on the SIGIO path LANDLOCKSCOPESIGNAL must prevent a sandboxed process from signaling processes outside its Landlock domain. It can be bypassed through the asynchronous SIGIO delivery path...

0.00219EPSS
SaveExploits0References4
CVE
CVE
added yesterday15 views

CVE-2026-72183

The CVE-2026-72183 entry relates to the Linux kernel Landlock feature. It documents a bypass of LANDLOCK_SCOPE_SIGNAL on the SIGIO path, where a sandboxed process that owns files or sockets can arm a fd with F_SETOWN, F_SETSIG, and O_ASYNC to cause signals to fan out to a whole process group, pot...

5.5AI score0.00219EPSS
SaveExploits0References4
EUVD
EUVD
added yesterday6 views

EUVD-2026-58941

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCKSCOPESIGNAL bypass on the SIGIO path LANDLOCKSCOPESIGNAL must prevent a sandboxed process from signaling processes outside its Landlock domain. It can be bypassed through the asynchronous SIGIO delivery path...

5.5AI score0.00219EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added yesterday7 views

PT-2026-72966

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory accounting for pinned/unpinned pages The account mem and unaccount mem functions call get uid which increments the reference count of struct user struct on every invocation. But we don't decrement the...

5.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added yesterday10 views

PT-2026-72371

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCK SCOPE SIGNAL bypass on the SIGIO path LANDLOCK SCOPE SIGNAL must prevent a sandboxed process from signaling processes outside its Landlock domain. It can be bypassed through the asynchronous SIGIO delivery...

5.5AI score0.00219EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added yesterday7 views

PT-2026-72408

In the Linux kernel, the following vulnerability has been resolved: sunrpc: harden rq procinfo lifecycle to prevent double-free The svc release rqst function executes the callback inside rqstp-rq procinfo-pc release. However, if a worker thread begins processing a new request and encounters an...

5.4AI score0.00206EPSS
SaveExploits0References4
OSV
OSV
added 2 days ago6 views

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

8.7CVSS6AI score
SaveExploits0References6
CVE
CVE
added 2 days ago17 views

CVE-2026-73680

Cockpit CMS 2.14.0 and earlier exposes a command-injection vulnerability in the FFmpeg integration. An authenticated user with assets/upload can upload a video file whose filename contains shell metacharacters; the unsanitized filename is interpolated into a shell command executed via Process::fr...

8.8CVSS5.8AI score0.01476EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2 days ago5 views

CVE-2026-45819

A flaw was found in baseline-browser-mapping. This vulnerability allows an attacker to cause a denial of service by providing invalid or conflicting input parameters. The affected component improperly terminates the process instead of handling the input error gracefully, leading to immediate...

8.7CVSS5.4AI score0.00371EPSS
SaveExploits0References6
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-58672

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...

7.3CVSS5.7AI score0.00099EPSS
SaveExploits0References1
NVD
NVD
added 2 days ago4 views

CVE-2026-72830

Grav API plugin versions before 1.0.13 fail to enforce API key scope caps in ConfigController super-scope gates, allowing scoped keys to write scheduler configuration. Attackers with a scoped api.config.write key can inject arbitrary commands into scheduler.customjobs that execute via Symfony...

9.8CVSS0.0044EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago7 views

CVE-2026-72813

actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files. When panic is set to abort, remote attackers can crash the process on-demand by sending a GET request with an empty Range header...

6.9CVSS0.00394EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2 days ago31 views

CVE-2026-72830 Grav API Plugin before 1.0.13 RCE via ConfigController scope bypass

Grav API plugin versions before 1.0.13 fail to enforce API key scope caps in ConfigController super-scope gates, allowing scoped keys to write scheduler configuration. Attackers with a scoped api.config.write key can inject arbitrary commands into scheduler.customjobs that execute via Symfony...

9.8CVSS0.0044EPSS
SaveExploits0References2
Rows per page
Query Builder