Lucene search
+L

3048 matches found

Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.25 views

PT-2026-39956

The Quick Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' attribute of the 'qtbl' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS6AI score0.00187EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.18 views

PT-2026-40083

Improper input validation for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

6.9CVSS5.7AI score0.00099EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.15 views

Intel QAT software drivers for Windows 输入验证错误漏洞

Intel QAT software drivers for Windows are a set of encryption and compression hardware acceleration drivers for the Windows platform developed by Intel Corporation. The version 2.6 of Intel QAT software drivers for Windows contained a vulnerability related to input validation errors. This...

6.9CVSS5.8AI score0.00099EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.18 views

Intel QAT software drivers for Windows 代码问题漏洞

Intel QAT software drivers for Windows are a set of encryption and compression hardware acceleration drivers for the Windows platform developed by Intel Corporation. There are code-related vulnerabilities in Intel QAT software drivers for Windows versions prior to 2.6.0. These vulnerabilities ste...

6.8CVSS5.8AI score0.00098EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.13 views

WordPress plugin Quick Table 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.8AI score0.00187EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.12 views

Intel QAT software drivers for Windows 输入验证错误漏洞

Intel QAT software drivers for Windows are a set of encryption and compression hardware acceleration drivers for the Windows platform developed by Intel Corporation. Versions of Intel QAT software drivers for Windows prior to version 1.13 contain a vulnerability related to input validation. This...

6.9CVSS5.8AI score0.00099EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.13 views

Intel QAT software drivers for Windows 安全漏洞

Intel QAT software drivers for Windows are a set of encryption and compression hardware acceleration drivers for the Windows platform developed by Intel Corporation. Versions prior to Intel QAT software drivers for Windows 1.13 contain security vulnerabilities. These vulnerabilities stem from the...

4.8CVSS5.8AI score0.00096EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/05/11 7:2 p.m.14 views

WordPress Quick Table plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by MAJidox in WordPress Plugin Quick Table versions = 1.0.0...

6.4CVSS5.8AI score0.00187EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2026/05/09 10:38 a.m.121 views

CoreExploit-Final

CoreExploit 🔐 Ethical Penetration Testing Learning Platfor...

5.8AI score
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/05/05 8:29 p.m.17 views

CVE-2026-35579

CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUIC, the server checks whether the TSIG key name exists in the configuration but never calls dns.TsigVerify to validate...

9.8CVSS5.8AI score0.0051EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/05/05 12:30 a.m.17 views

EUVD-2026-27159

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quickcapture of the file pysharkmcp.py. The manipulation results in os command injection. The attack may be launched...

7.5CVSS6.8AI score0.01312EPSS
SaveExploits0References6
NVD
NVD
added 2026/05/05 12:16 a.m.15 views

CVE-2026-7785

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quickcapture of the file pysharkmcp.py. The manipulation results in os command injection. The attack may be launched...

7.5CVSS0.01312EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/04 11:45 p.m.27 views

CVE-2026-7785

CVE-2026-7785 affects A-G-U-P-T-A wireshark-mcp: the vulnerable component is the function quick_capture in pyshark_mcp.py, with an underlying issue leading to an OS command injection. The description indicates the issue can be triggered remotely and that a public exploit may exist. There are no v...

7.5CVSS6.8AI score0.01312EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/04 11:45 p.m.49 views

CVE-2026-7785 A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quickcapture of the file pysharkmcp.py. The manipulation results in os command injection. The attack may be launched...

7.5CVSS0.01312EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/04 11:45 p.m.7 views

CVE-2026-7785 A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quickcapture of the file pysharkmcp.py. The manipulation results in os command injection. The attack may be launched...

7.5CVSS6.8AI score0.01312EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/04 11:45 p.m.7 views

CVE-2026-7785

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quickcapture of the file pysharkmcp.py. The manipulation results in os command injection. The attack may be launched...

7.5CVSS6.8AI score0.01312EPSS
SaveExploits0References5
OSV
OSV
added 2026/05/04 9:10 p.m.14 views

MAL-2026-3333 Malicious code in rogiant-quick-install (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 efdebb03bb05b0da602f813ad321bbc81c658ac1bec059a5a7fa73fed277a53b During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...

6AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.24 views

PT-2026-36936

A security flaw has been discovered in A-G-U-P-T-A wireshark-mcp edaf604416fbc94a201b4043092d4a1b09a12275/400c3da70074f22f3cce7ccb65304cafc7089c89. This affects the function quick capture of the file pyshark mcp.py. The manipulation results in os command injection. The attack may be launched...

7.5CVSS5.6AI score0.01312EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2026/05/01 9:14 a.m.11 views

WordPress XT Quick View for WooCommerce plugin <= 2.1.5 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin XT Quick View for WooCommerce versions = 2.1.5...

6.1CVSS5.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2026/04/30 12:39 p.m.19 views

CVE-2025-14576

Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick. While QML execution is typically more restricted than native code execution, this could still lead to denial of...

9.3CVSS6.1AI score0.00224EPSS
SaveExploits0
Rows per page
Query Builder