Lucene search
+L

125 matches found

Kitploit
Kitploit
•added 2026/10/30 7:11 a.m.•62 views

samplicator

UDP Samplicator This small program receives UDP datagrams on a given port, and resends those datagrams to a specified set of receivers. In addition, a sampling divisor N may be specified individually for each receiver, which will then only receive one in N of the received packets. DOWNLOADING Thi...

6.3AI score
SaveExploits0References2
CVE
CVE
•added 2026/10/16 5:38 p.m.•17 views

CVE-2026-111608

The software Jeepay through version 3.2.9 is affected by an insecure direct object reference (IDOR) vulnerability. Authenticated merchant users possessing the ENT_DIVISION_RECEIVER_DELETE permission can delete profit-sharing receivers belonging to other merchants. The root cause is an incorrect o...

4.2CVSS5.9AI score0.00302EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/16 5:38 p.m.•30 views

CVE-2026-111608 Jeepay through 3.2.9 IDOR via DELETE /api/divisionReceivers/{recordId}

Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to delete other merchants' division receivers by exploiting an ownership check on the wrong column. Attackers holding ENTDIVISIONRECEIVERDELETE who own a receiver group whose i...

4.2CVSS0.00302EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/16 5:38 p.m.•7 views

CVE-2026-111608 Jeepay through 3.2.9 IDOR via DELETE /api/divisionReceivers/{recordId}

Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to delete other merchants' division receivers by exploiting an ownership check on the wrong column. Attackers holding ENTDIVISIONRECEIVERDELETE who own a receiver group whose i...

4.2CVSS5.9AI score0.00302EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/16 5:38 p.m.•7 views

CVE-2026-111608 Jeepay through 3.2.9 IDOR via DELETE /api/divisionReceivers/{recordId}

Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to delete other merchants' division receivers by exploiting an ownership check on the wrong column. Attackers holding ENTDIVISIONRECEIVERDELETE who own a receiver group whose i...

2.3CVSS5.9AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/16 12:00 a.m.•8 views

CVE-2026-111608: Authorization Bypass Through User-Controlled Key

Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to delete other merchants' division receivers by exploiting an ownership check on the wrong column. Attackers holding ENTDIVISIONRECEIVERDELETE who own a receiver group whose i...

4.2CVSS5.9AI score0.00302EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/16 12:00 a.m.•17 views

PT-2026-116007

Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to delete other merchants' division receivers by exploiting an ownership check on the wrong column. Attackers holding ENT DIVISION RECEIVER DELETE who own a receiver group whos...

4.2CVSS5.9AI score0.00302EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
•added 2026/10/07 12:00 a.m.•11 views

CV-QKD with Noisy Coherent States and Realistic Displacement Receivers

Near-optimal binary coherent state discrimination can be achieved by performing a displacement operation followed by photon detection. This displacement serves as a control parameter that can be tuned to optimize a chosen figure of merit, which makes such receivers attractive beyond state...

5.9AI score
SaveExploits0
NVD
NVD
•added 2026/08/10 11:17 a.m.•41 views

CVE-2026-72585

Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...

0.00235EPSS
SaveExploits1
UbuntuCve
UbuntuCve
•added 2026/08/10 11:17 a.m.•18 views

CVE-2026-72585

Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...

6.5CVSS5.8AI score0.00235EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2026/08/10 11:17 a.m.•45 views

UBUNTU-CVE-2026-72585

An authorization bypass vulnerability in Grafana through 13.2.0 allows an Editor-role user to delete protected contact points receivers without the required alert.notifications.receivers.protected:write permission...

6.5CVSS5.9AI score0.00235EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/08/10 10:41 a.m.•23 views

CVE-2026-72585

An authorization bypass vulnerability in Grafana through 13.2.0 allows an Editor-role user to delete protected contact points receivers without the required alert.notifications.receivers.protected:write permission...

6.5CVSS6.4AI score0.00273EPSS
SaveExploits1References4
CVE
CVE
•added 2026/08/10 10:41 a.m.•144 views

CVE-2026-72585

This CVE is rejected/not used and does not represent an active vulnerability entry.

5.2AI score0.00235EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2026/08/10 10:41 a.m.•22 views

CVE-2026-72585 Grafana - Incomplete Fix for CVE-2026-21724 Allows Editor Role to Delete Protected Contact Points

An authorization bypass vulnerability in Grafana through 13.2.0 allows an Editor-role user to delete protected contact points receivers without the required alert.notifications.receivers.protected:write permission...

6.5CVSS5.8AI score0.00235EPSS
SaveExploits1References3
NVD
NVD
•added 2026/07/19 4:17 p.m.•25 views

CVE-2026-64128

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: drop ISOEND frames received without prior ISOSTART ISO data PDUs carry a packet-boundary flag indicating START, CONT, END or SINGLE. The ISOCONT branch of isorecv guards against a missing ISOSTART by checking...

5.5CVSS0.00128EPSS
SaveExploits0References6
NVD
NVD
•added 2026/07/15 1:17 p.m.•50 views

CVE-2026-46459

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database. This issue has been fixed in version 2.4.18.029...

5.3CVSS0.00433EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/15 12:51 p.m.•28 views

EUVD-2026-44667

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database. This issue has been fixed in version 2.4.18.029...

5.3CVSS6.1AI score0.00433EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/15 12:51 p.m.•69 views

CVE-2026-46459

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database. This issue has been fixed in version 2.4.18.029...

7.1CVSS6.1AI score0.00433EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/05/28 4:48 p.m.•15 views

Deserialization of Untrusted Data

Overview ch.qos.logback:logback-classic is a reliable, generic, fast and flexible logging library for Java. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in HardenedObjectInputStream, whose resolveClass allowlist admitted any class whose name starts with...

6.3CVSS5.8AI score0.0037EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/05/27 4:12 a.m.•20 views

SUSE CVE-2023-51448

Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection SQLi vulnerability within the SNMP Notification Receivers feature in the file 'managers.php'. An authenticated attacker with the "Settings/Utilities" permission can send a crafted HTT...

8.8CVSS7.5AI score0.67338EPSS
SaveExploits1References4
Rows per page
Query Builder