Lucene search
+L

8149 matches found

Github Security Blog
Github Security Blog
added 2026/09/17 2:51 p.m.8 views

Marten's LINQ provider has SQL injection via unescaped string literals

Several code paths in Marten's LINQ provider and tenant-management internals interpolated a runtime, potentially attacker-influenced value into generated SQL as a single-quoted string literal without escaping or parameterization. A value containing a single quote ' could break out of the literal...

9.1CVSS0.00352EPSS
SaveExploits0References6Affected Software1
Kitploit
Kitploit
added 2026/09/17 1:18 a.m.13 views

CVE-2026-5465

CVE-2026-5465: Privilege Escalation in Amelia WordPress Plugin ⚠️ Executive Summary Critical Insecure Direct Object Reference IDOR vulnerability in the Amelia plugin that allows an authenticated user with the Employee Provider role to escalate privileges up to full Account Takeover of the WordPres...

8.8CVSS5.7AI score0.00632EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/09/17 12:00 a.m.5 views

Oracle Linux 10 : openssl (ELSA-2026-500326)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500326 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves...

9.8CVSS0.01481EPSS
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/16 10:17 p.m.5 views

Dubbo-deserialization

Dubbo-deserialization CVE-2020-1948 Apache Dubbo Provider default deserialization cause RCE Dubbo Study Dubbo-exp Dubbo-poc Dubbo复现环境...

9.8CVSS0.16441EPSS
SaveExploits3
Cvelist
Cvelist
added 2026/09/16 8:46 p.m.28 views

CVE-2026-75513 Marten: SQL injection in Marten's LINQ provider via unescaped string literals

Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. From version 7.0.0 until 9.13.0, several Marten LINQ and tenant-management paths interpolate runtime, potentially attacker-controlled strings into single-quoted SQL literals without escaping or parameterization. The primary...

9.1CVSS0.00352EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/16 8:32 p.m.6 views

CVE-2026-92750 Harness through 3.3.0 Missing Access Control via infraproviders endpoint

Harness through 3.3.0 omits access control validation in the infrastructure provider read endpoint, allowing authenticated users to retrieve provider configurations from spaces they do not belong to. Attackers can query the GET /api/v1/infraproviders endpoint with arbitrary space identifiers to...

7.1CVSS
SaveExploits0References7
NVD
NVD
added 2026/09/16 8:17 p.m.10 views

CVE-2026-81866

Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration. Updating or verifying a Connector configuration step can apply Asset and Secret...

2.1CVSS0.00403EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 8:05 p.m.18 views

CVE-2026-58073-check

Veeam Service Provider Console Agent Impersonation — Patch-State Detection Script A safe, unauthenticated detector for the KB4893 vulnerabilities in Veeam Service Provider Console published 2026-08-04. It answers one question per target, before any authentication or TLS: are the KB4893 fixes...

9.5CVSS6.7AI score0.00474EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/09/16 7:38 p.m.39 views

CVE-2026-81866 Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration

Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration. Updating or verifying a Connector configuration step can apply Asset and Secret...

2.1CVSS0.00403EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 7:38 p.m.13 views

CVE-2026-81866

Apache NiFi 2.9.0 through 2.11.0 contain a missing authorization flaw in the Connector configuration update and verification REST API methods . The framework enforced write privileges only on the Connector itself, without verifying read access to referenced Parameter Providers or ownership of ref...

2.1CVSS0.00403EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 5:21 p.m.8 views

CVE-2026-32794

CVE-2026-32794: TLS Certificate Verification Bypass in Apache Airflow Databricks Provider Keywords: TLS, certificate verification, MITM, Kubernetes, Databricks, OAuth, CWE-295, Apache Airflow Table of Contents Overview Vulnerability Details Technical Analysis Attack Chain Impact Remediation...

4.8CVSS6AI score0.00355EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2026/09/16 3:45 p.m.4 views

keycloak-services: keycloak-services: Incomplete fix for arbitrary filesystem path probing via keystore parameters

A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a previous fix for path probing was incomplete, allowing a realm administrator to still submit arbitrary filesystem paths as keysto...

4.9CVSS0.00563EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/16 3:45 p.m.7 views

keycloak-services: keycloak-services: Broker-originated username collision causes account lockout

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

5.3CVSS0.00507EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/16 3:45 p.m.8 views

keycloak-services: keycloak-services: Incomplete fix for arbitrary filesystem path probing via keystore parameters

A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a previous fix for path probing was incomplete, allowing a realm administrator to still submit arbitrary filesystem paths as keysto...

4.9CVSS0.00563EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 11:59 a.m.14 views

CVE-2025-4578

CVE-2025-4578 File Provider = 1.2.3 - Inyección SQL no autenticada Descripción El plugin File Provider para WordPress es vulnerable a Inyección SQL a través del parámetro 'fileId' en todas las versiones hasta la 1.2.3 inclusive, debido a un escape insuficiente en el parámetro proporcionado por el...

9.8CVSS8.2AI score0.00557EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/16 10:57 a.m.8 views

CVE-2023-34362

CVE-2023-34362 POC para CVE-2023-34362 que afecta a MOVEit Transfer Análisis técnico Un análisis técnico de causa raíz de la vulnerabilidad se puede encontrar en el blog: Resumen Este POC explota una inyección SQL para obtener un token de acceso de API de sysadmin y luego utiliza ese acceso para...

9.8CVSS8.8AI score0.99934EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/16 10:27 a.m.10 views

AOSP-DownloadProviderHeadersDumper

AOSP-DownloadProviderHeadersDumper PoC que explota la divulgación de encabezados en el Proveedor de Descargas de Android CVE-2018-9546 Aviso de Seguridad...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 10:27 a.m.8 views

AOSP-ExploitUserDictionary

AOSP-ExploitUserDictionary Exploit PoC para el Content Provider UserDictionary de AOSP CVE-2018-9375 Aviso de seguridad https://ioactive.com/wp-content/uploads/2018/08/IOActive-Security-Advisory-AOSP-UserDictionaryProvider-v1.0.pdf Más información...

7.8CVSS7.5AI score0.00201EPSS
SaveExploits0
NVD
NVD
added 2026/09/16 10:16 a.m.11 views

CVE-2026-86792

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's extra field into Python callables via importstring, with no allowlist, and hand them to the confluent-kafka client which invokes them. Deployments that have enabled the Kafk...

8.8CVSS0.01156EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/16 9:17 a.m.7 views

CVE-2026-86462

Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not invalidate that user's existing database-backed sessions. An attacker who already holds a copy of the victim's session cookie keeps full access as that user after the password change, so th...

9.1CVSS0.00805EPSS
SaveExploits0References4
Rows per page
Query Builder