Lucene search
+L

127942 matches found

EUVD
EUVD
added 2026/09/10 3:28 p.m.9 views

EUVD-2026-75581

knowns through 0.33.0 fails to confine the path argument of the code.find MCP tool to the project root, allowing AI agent sessions to read source files anywhere on the host. Attackers can supply absolute paths or relative traversal sequences to the path argument and retrieve full file contents fr...

7.1CVSS0.00327EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/10 3:28 p.m.9 views

EUVD-2026-75582

knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities...

8.7CVSS0.00268EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/10 3:28 p.m.5 views

CVE-2026-88939 knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption

knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. Attackers can invoke project.set to repoint the server at another project directory and obtain write access capabilities...

8.7CVSS0.00464EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/09/10 3:28 p.m.10 views

CVE-2026-88938 knowns through 0.33.0 Path Traversal via code.find MCP tool

knowns through 0.33.0 fails to confine the path argument of the code.find MCP tool to the project root, allowing AI agent sessions to read source files anywhere on the host. Attackers can supply absolute paths or relative traversal sequences to the path argument and retrieve full file contents fr...

7.1CVSS0.00327EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/10 3:28 p.m.9 views

EUVD-2026-75580

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

8.8CVSS0.00517EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/10 3:28 p.m.9 views

CVE-2026-88937 knowns through 0.33.0 Path Traversal via Template Engine

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

8.6CVSS6.2AI score
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/09/10 3:10 p.m.11 views

CVE-2026-88914

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

4.4CVSS0.00123EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/10 2:17 p.m.9 views

CVE-2026-88891

OpenPanel fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and publish project data. Attackers with explicit read-only access can delete reports and dashboards, schedule entire projects for deletion, publish private...

8.3CVSS0.00254EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 2:08 p.m.8 views

geiger

geiger A Geiger counter for AI agents. One read-only command that inventories every AI agent, harness, MCP server, plugin, and AI extension on a machine — and tells you, in plain language, what each one can touch. root@kitploit: npx geiger-scan No install. No account. No telemetry. Reads configs...

6.2AI score
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/09/10 1:38 p.m.8 views

github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink,...

7.1CVSS0.00357EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2026/09/10 1:18 p.m.7 views

vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator

A flaw was found in Vim. A remote attacker could exploit a heap-based buffer overflow and an out-of-bounds read vulnerability in Vim's terminal emulator. This occurs when processing specially crafted Unicode supplementary plane characters, potentially leading to information disclosure and denial ...

4.4CVSS0.00177EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2026/09/10 1:17 p.m.8 views

WordPress AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter vulnerability

WordPress AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin = 11.0.4 - Unauthenticated Arbitrary File Read via 'username' Parameter vulnerability discovered by daroo in WordPress Plugin AcyMailing SMTP Newsletter versions = 11.0.4...

7.5CVSS0.0068EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/10 1:09 p.m.5 views

wp-user-registration-vuln-checker

Comprobador de User Registration de WordPress para CVE-2026-1492 Comprobador de solo lectura para sitios de WordPress propios que pueden estar afectados por CVE-2026-1492 en el plugin User Registration & Membership. Ayuda al propietario del sitio a confirmar la exposición del plugin y a buscar...

9.8CVSS9.1AI score0.27989EPSS
SaveExploits2References2
EUVD
EUVD
added 2026/09/10 1:05 p.m.9 views

EUVD-2026-75441

OpenPanel fails to enforce read-only project access level on 26 of 29 mutating procedures, allowing read-level members to modify, delete, and publish project data. Attackers with explicit read-only access can delete reports and dashboards, schedule entire projects for deletion, publish private...

8.3CVSS0.00254EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/10 1:05 p.m.15 views

CVE-2026-88891

OpenPanel fails to enforce its read-only project access level on 26 of 29 mutating procedures , caused by missing access level validation in mutation resolvers. Attackers with explicit read-only access can modify, delete, and publish project data , including deleting reports and dashboards, sched...

8.3CVSS0.00254EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 12:49 p.m.6 views

ktor-xxe-poc

CVE-2023-45612: Prueba de concepto de XXE en JetBrains Ktor Este repositorio contiene un servidor Ktor vulnerable para demostrar la vulnerabilidad de inyección de entidad externa XML XXE identificada en CVE-2023-45612. La vulnerabilidad existe en versiones de Ktor anteriores a 2.3.5 cuando el...

9.8CVSS8.2AI score0.00595EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/10 12:18 p.m.6 views

CVE-2025-0690

CVE-2025-0690: Vulnerabilidad de Desbordamiento de Enteros en GRUB2 🛡️ Descripción General CVE-2025-0690 es una vulnerabilidad crítica de desbordamiento de enteros en el cargador de arranque GRUB2 , que permite la ejecución de código arbitrario y la evasión de Secure Boot. Esta falla afecta a...

6.1CVSS7.4AI score0.00702EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 12:16 p.m.11 views

CVE-2025-65264

CVE-2025-65264 Descripción En CPU‑Z 2.17 y anteriores y otros productos que usan el controlador CPU-Z con versión 1.0.6.1 y anteriores, el controlador ej. cpuz161.sys desreferenció un valor desde una dirección proporcionada por el usuario y lo escribió en el búfer del sistema suministrado por la...

5.5CVSS5.8AI score0.00184EPSS
SaveExploits1
NVD
NVD
added 2026/09/10 12:16 p.m.8 views

CVE-2026-84828

A flaw was found in PCS Pacemaker Configuration System. A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files on the filesystem, provided the files are shorter than 256 bytes. The file contents are read wit...

6.5CVSS0.00103EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 12:09 p.m.8 views

CVE-2025-57819_FreePBX-PoC

FreePBX SQL Injection Checker 🔍 Detector de SQLi de solo lectura y seguro para /admin/ajax.php de FreePBX, centrado en los parámetros template, model y brand. 🛡️ Utiliza técnicas basadas en errores , booleanas y basadas en tiempo para señalar posibles inyecciones sin modificar la base de datos. ✍️...

10CVSS8.4AI score0.85463EPSS
SaveExploits30
Rows per page
Query Builder