4 matches found
CVE-2026-70615
boringproxy through 0.10.0 contains a newline injection vulnerability that allows authenticated low-privileged users with tunnel-creation permission to inject arbitrary lines into the server account's SSH authorizedkeys file by supplying a percent-encoded newline character in the domain parameter...
9.9CVSS0.00215EPSS
SaveExploits0References2
Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager
CVE-2026-20182 — Cisco Catalyst SD-WAN Controller / Manager Au...
10CVSS6.2AI score0.91522EPSS
SaveExploits4
EUVD-2022-52065
Malicious code in bioql PyPI...
9.8CVSS7AI score0.00666EPSS
SaveExploits0References4
Cross site request forgery (csrf)
The av-centerd SOAP service in AlienVault OSSIM before 4.8.0 allows remote attackers to execute arbitrary code via a crafted remotetask request, related to injecting an ssh public key...
10CVSS8.1AI score0.05785EPSS
SaveExploits0References3Affected Software1
20