Lucene search
+L

33216 matches found

EUVD
EUVD
added 1 hour ago4 views

EUVD-2026-59953

Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.tojson builtin function that lacks depth limits and circular reference detection. Attackers can craft templates with self-referencing objects to trigger unbounded recursion, causing a StackOverflowException that...

8.7CVSS5.3AI score
SaveExploits0References3
EUVD
EUVD
added 1 hour ago4 views

EUVD-2026-59950

Scriban before 7.2.0 contains a denial of service vulnerability in the array.insertat function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers can supply a large index parameter to trigger OutOfMemoryException and crash the host process i...

8.7CVSS5.4AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 3 hours ago3 views

CVE-2026-74794

Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...

8.7CVSS
SaveExploits0References3
Cvelist
Cvelist
added 3 hours ago4 views

CVE-2026-74792 Scriban before 7.0.0 Stack Overflow via nested array initializers

Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...

8.7CVSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 3 hours ago3 views

CVE-2026-74787

Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.tojson builtin function that lacks depth limits and circular reference detection. Attackers can craft templates with self-referencing objects to trigger unbounded recursion, causing a StackOverflowException that...

8.7CVSS
SaveExploits0References3
Nuclei
Nuclei
added 14 hours ago40 views

Apache NiFi - Information Disclosure

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

5.4CVSS5.8AI score0.0313EPSS
SaveExploits0
Nuclei
Nuclei
added 14 hours ago48 views

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

9.9CVSS6AI score0.36503EPSS
SaveExploits7References3
Nuclei
Nuclei
added 14 hours ago19 views

Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wpcapabilities user meta that defines a user's role. During the registration...

10CVSS8.5AI score0.08975EPSS
SaveExploits2References3
Nuclei
Nuclei
added 14 hours ago113 views

Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage

Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. id: CVE-2015-2080 info: name: Eclipse Jetty 9.2.9.v20150224 - Sensitive Information Leakage author: pikpikcu severity: high description: Eclip...

7.5CVSS7.6AI score0.74881EPSS
SaveExploits16References5
Positive Technologies
Positive Technologies
added 16 hours ago8 views

PT-2026-73069

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkout process.php. Executing a manipulation of the argument total count can lead to sql injection. The attack can be launched remotely. The exploit has been made available to t...

6.5CVSS6.5AI score
SaveExploits0References7
NVD
NVD
added yesterday4 views

CVE-2026-74270

In the Linux kernel, the following vulnerability has been resolved: handshake: Require admin permission for DONE command ACCEPT and DONE are the two downcalls of the handshake genl family, both intended for use by the trusted handshake agent tlshd. ACCEPT already requires GENLADMINPERM; DONE has ...

0.00168EPSS
SaveExploits0References5
NVD
NVD
added yesterday3 views

CVE-2026-72183

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCKSCOPESIGNAL bypass on the SIGIO path LANDLOCKSCOPESIGNAL must prevent a sandboxed process from signaling processes outside its Landlock domain. It can be bypassed through the asynchronous SIGIO delivery path...

0.00219EPSS
SaveExploits0References4
Cvelist
Cvelist
added yesterday17 views

CVE-2026-72183 landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCKSCOPESIGNAL bypass on the SIGIO path LANDLOCKSCOPESIGNAL must prevent a sandboxed process from signaling processes outside its Landlock domain. It can be bypassed through the asynchronous SIGIO delivery path...

0.00219EPSS
SaveExploits0References4
CVE
CVE
added yesterday15 views

CVE-2026-72183

The CVE-2026-72183 entry relates to the Linux kernel Landlock feature. It documents a bypass of LANDLOCK_SCOPE_SIGNAL on the SIGIO path, where a sandboxed process that owns files or sockets can arm a fd with F_SETOWN, F_SETSIG, and O_ASYNC to cause signals to fan out to a whole process group, pot...

5.5AI score0.00219EPSS
SaveExploits0References4
EUVD
EUVD
added yesterday6 views

EUVD-2026-58941

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCKSCOPESIGNAL bypass on the SIGIO path LANDLOCKSCOPESIGNAL must prevent a sandboxed process from signaling processes outside its Landlock domain. It can be bypassed through the asynchronous SIGIO delivery path...

5.5AI score0.00219EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added yesterday7 views

PT-2026-72966

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory accounting for pinned/unpinned pages The account mem and unaccount mem functions call get uid which increments the reference count of struct user struct on every invocation. But we don't decrement the...

5.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added yesterday10 views

PT-2026-72371

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCK SCOPE SIGNAL bypass on the SIGIO path LANDLOCK SCOPE SIGNAL must prevent a sandboxed process from signaling processes outside its Landlock domain. It can be bypassed through the asynchronous SIGIO delivery...

5.5AI score0.00219EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added yesterday7 views

PT-2026-72408

In the Linux kernel, the following vulnerability has been resolved: sunrpc: harden rq procinfo lifecycle to prevent double-free The svc release rqst function executes the callback inside rqstp-rq procinfo-pc release. However, if a worker thread begins processing a new request and encounters an...

5.4AI score0.00206EPSS
SaveExploits0References4
OSV
OSV
added 2 days ago7 views

CVE-2026-73680 Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename

Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell metacharacter-laden filename. The unsanitized filename is...

8.7CVSS6AI score
SaveExploits0References6
CVE
CVE
added 2 days ago18 views

CVE-2026-73680

Cockpit CMS 2.14.0 and earlier exposes a command-injection vulnerability in the FFmpeg integration. An authenticated user with assets/upload can upload a video file whose filename contains shell metacharacters; the unsanitized filename is interpolated into a shell command executed via Process::fr...

8.8CVSS5.8AI score0.01476EPSS
SaveExploits0References4
Rows per page
Query Builder