Lucene search
+L

222895 matches found

Nuclei
Nuclei
added 2026/09/23 2:05 a.m.14 views

Drupal LocalGov Workflows < 1.6.0 - Information Disclosure

Drupal LocalGov Workflows 1.6.0 contains a broken access control vulnerability caused by missing authorization checks, letting attackers perform forceful browsing to access unauthorized resources, exploit requires no special privileges. id: CVE-2026-10768 info: name: Drupal LocalGov Workflows 1.6...

9.8CVSS5.7AI score0.02126EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.39 views

Balbooa Forms < 2.4.1 - Unauthenticated Arbitrary File Upload

Joomla Balbooa Forms contains an unrestricted file upload vulnerability caused by lack of authentication checks, letting unauthenticated attackers upload executable files and achieve remote code execution. id: CVE-2026-56291 info: name: Balbooa Forms 2.4.1 - Unauthenticated Arbitrary File Upload...

10CVSS8.4AI score0.14854EPSS
SaveExploits6References2
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.58 views

Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent DoS

Adminer = 5.4.1 contains a denial of service caused by lack of origin validation in version check endpoint, letting attackers trigger server errors via crafted POST requests, exploit requires no special privileges. id: CVE-2026-25892 info: name: Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent Do...

7.5CVSS5.7AI score0.01586EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.36 views

Vendure Core - SQL Injection

Vendure, an open-source headless commerce platform built on Node.js/TypeScript, contains a critical SQL injection vulnerability in its Shop API. The languageCode query parameter is interpolated directly into a raw SQL CASE expression in ProductService.findOneBySlug without parameterization or inp...

9.1CVSS6.4AI score0.01762EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.19 views

Flowise < 3.1.3 - Remote Code Execution

Flowise prior to 3.1.3 contains a remote code execution vulnerability caused by allowing authenticated users to set arbitrary TypeORM DataSource options including entities that load local JavaScript files, letting authenticated users execute arbitrary code on the server, exploit requires user...

9CVSS6.8AI score0.03269EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.16 views

Gotenberg < 8.31.0 - Server-Side Request Forgery

Gotenberg before 8.31.0 is vulnerable to server-side request forgery SSRF due to insufficient validation of URLs in the downloadFrom API. An unauthenticated attacker can exploit the flaw by providing specially crafted IPv4-mapped IPv6 addresses such as http://::ffff:127.0.0.1 that bypass the...

9.4CVSS8AI score0.01239EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.14 views

GeoServer jsonArrayContains CQL Filter - SQL Injection

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoTools FilterToSqlHelper.constructEquality writes the expected argument of the jsonArrayContains CQL function RAW into the SQL string while only escaping the JSON pointer. A single...

9.8CVSS8AI score0.85247EPSS
SaveExploits6References4
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.17 views

IBM Langflow - Remote Code Execution

IBM Langflow OSS 1.0.0 through 1.10.0 contains a remote code execution caused by chaining /api/v1/autologin and /api/v1/validate/code endpoints, letting unauthenticated attackers execute arbitrary code remotely, exploit requires no authentication. id: CVE-2026-9198 info: name: IBM Langflow - Remo...

9.8CVSS9.1AI score0.60597EPSS
SaveExploits9References4
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.127 views

Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage

Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. id: CVE-2015-2080 info: name: Eclipse Jetty 9.2.9.v20150224 - Sensitive Information Leakage author: pikpikcu severity: high description: Eclip...

7.5CVSS7.4AI score0.62935EPSS
SaveExploits16References5
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.55 views

IceWarp Mail Server <11.1.1 - Directory Traversal

IceWarp Mail Server versions prior to 11.1.1 suffer from a directory traversal vulnerability. id: CVE-2015-1503 info: name: IceWarp Mail Server 11.1.1 - Directory Traversal author: 0xAkoko severity: high description: IceWarp Mail Server versions prior to 11.1.1 suffer from a directory traversal...

7.8CVSS7.2AI score0.30761EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.53 views

GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method Invocation

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQ...

9.4CVSS8.3AI score0.05811EPSS
SaveExploits6References4
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.15 views

Paperclip - Remote Code Execution

Paperclip 2026.416.0 contains a remote code execution caused by a chain of six unauthenticated API calls in authenticated mode with default configuration, letting unauthenticated attackers execute arbitrary code remotely, exploit requires network access to the target. id: CVE-2026-41679 info: nam...

10CVSS6.9AI score0.18852EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.234 views

Jakarta Tomcat 3.1 and 3.0 - Information Disclosure

Jakarta Tomcat 3.1 and 3.0 under Apache contain a vulnerability in the Snoop servlet that reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension, exploit requires remote access. id: CVE-2000-0760 info: name: Jakarta Tomcat 3.1 and 3.0 -...

6.4CVSS5.8AI score0.62496EPSS
SaveExploits2References2
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.25 views

SquirrelMail Address Add 1.4.2 - Cross-Site Scripting

SquirrelMail Address Add 1.4.2 plugin contains a cross-site scripting vulnerability. It fails to properly sanitize user-supplied input, thus allowing an attacker to execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

4.3CVSS6AI score0.03436EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.4 views

SiYuan <=3.7.2 - SQL Injection

SiYuan before v3.7.3 contains a SQL injection caused by direct concatenation of the keyword parameter in /api/filetree/searchDocs endpoint, letting attackers with publish RoleReader token or unauthenticated in publish mode read and modify database content. id: CVE-2026-69085 info: name: SiYuan...

10CVSS0.00875EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.160 views

SAP Web Application Server 6.x/7.0 - Open Redirect

frameset.htm in the BSP runtime in SAP Web Application Server WAS 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter. id: CVE-2005-3634 info: name: SAP Web...

5CVSS6AI score0.17757EPSS
SaveExploits2References6
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.13 views

Dockwatch <= 0.6.567 - OS Command Injection

Dockwatch through 0.6.567 contains an unauthenticated command injection caused by missing exit after authentication redirect in loader.php and unsanitized input in ajax/compose.php, letting remote attackers execute arbitrary shell commands, exploit requires seeding a session flag via incomplete...

9.8CVSS8.6AI score0.0804EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.8 views

TEN Framework - Arbitrary File Read & Write

TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints, letting attackers read or write arbitrary files and execute code. The exploit requires no authentication. id: CVE-2026-85688 info: name: TEN Framework -...

9.8CVSS0.01469EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.68 views

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

5CVSS7.9AI score0.73028EPSS
SaveExploits12References5
Nuclei
Nuclei
added 2026/09/23 2:05 a.m.57 views

AnythingLLM - Username Enumeration via Password Recovery

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to commit e287fab56089cf8fcea9ba579a3ecdeca0daa313, the password recovery endpoint returns different error messages depending on whether a username exists, so enabling...

5.3CVSS5.7AI score0.00779EPSS
SaveExploits1
Rows per page
Query Builder