Lucene search
+L

39518 matches found

Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•66 views

PT-2026-87957

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A release of an invalid pointer or reference in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. This issue occur...

7.8CVSS6.9AI score0.00333EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/07 2:16 p.m.•8 views

CVE-2026-86307

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...

5.3CVSS0.0023EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/07 1:15 p.m.•38 views

CVE-2026-86307 light0011 cms cross-site request forgery

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...

5.3CVSS0.0023EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/07 1:15 p.m.•22 views

CVE-2026-86307

A cross-site request forgery (CSRF) vulnerability was identified in light0011 cms , affecting unknown code within commits c774dce and f72cf46. The attack is remotely initiated with low complexity and requires no authentication, but does require user interaction. Impact is limited to low integrity...

5.3CVSS5.1AI score0.0023EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/07 1:15 p.m.•13 views

EUVD-2026-72399

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...

5.3CVSS5AI score0.0023EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/07 1:15 p.m.•11 views

CVE-2026-86307 light0011 cms cross-site request forgery

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...

5.3CVSS5.1AI score0.0023EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/07 12:45 p.m.•43 views

CVE-2026-86305 light0011 cms Upload.class.php upload unrestricted upload

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is the function Upload::upload of the file ThinkPHP/Library/Think/Upload.class.php. Performing a manipulation results in unrestricted...

7.5CVSS0.00495EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/07 12:45 p.m.•21 views

CVE-2026-86305

An unrestricted file upload vulnerability exists in light0011 cms , specifically in the Upload::upload function within ThinkPHP/Library/Think/Upload.class.php. A remote, unauthenticated attacker can exploit this flaw to upload arbitrary files, resulting in low impact on confidentiality, integrity...

7.5CVSS6.7AI score0.00495EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/07 12:15 p.m.•11 views

CVE-2026-86303 92181 markdown md.c lds out-of-bounds

A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. Affected by this issue is the function lds of the file md.c. Executing a manipulation can lead to out-of-bounds read. The attack can be executed remotely. This product implements a rolling release for...

7.5CVSS6.6AI score0.0054EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/09/07 7:45 a.m.•14 views

Security update for httpcomponents-client

This update for httpcomponents-client fixes the following issue: CVE-2026-64607: improper release of underlying connection back to connection manager when an invalid or unsupported Content-Encoding header value in a response message bsc1273163. Patch Instructions: To install this SUSE update use...

6.9CVSS7.1AI score0.00464EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86812

A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit...

5.3CVSS5AI score0.0023EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/09/07 12:00 a.m.•20 views

Debian dla-4775 : thunderbird - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4775 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4775-1 [email protected]...

10CVSS6.5AI score0.00455EPSS
SaveExploits0References30
Tenable Nessus
Tenable Nessus
•added 2026/09/06 12:00 a.m.•14 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053251)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053251 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to...

7.8CVSS6.1AI score0.00239EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/06 12:00 a.m.•7 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053418)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053418 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix use-after-free in rtl8712dlfw Syzbot reported use-after-free in rtl8712dlfw...

7CVSS6.5AI score0.00228EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/06 12:00 a.m.•13 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-085346)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-085346 advisory. In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fbdisplayi-mode to NULL when the mode is released Recently, we discovered the followi...

7.8CVSS6.8AI score0.0014EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/05 10:26 p.m.•18 views

caido v0.58.3

Website • Dashboard • Docs • Roadmap • Branding • Discord 👋 Welcome Welcome to Caido! Caido aims to help security professionals and enthusiasts audit web applications with efficiency and ease. Here you can get involved with the development of our software. You can learn about upcoming Caido...

5.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/05 6:51 p.m.•7 views

Missing Release of Resource after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime in the rpcapd process. An attacker can exhaust system memory by sending specially crafted RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ messages, causing the service to become...

5.3CVSS5.8AI score0.00227EPSS
SaveExploits0References2
Circl
Circl
•added 2026/09/05 6:00 p.m.•15 views

CVE-2023-5070

creationtimestamp| type| source ---|---|--- 2026-09-05 18:00:05+00:00| published-proof-of-concept| Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85WwIzNKkpSTY 2026-09-06 00:00:39+00:00| published-proof-of-concept| Telegram/wtW6bpJN7eATls7OA2vLhVZp9FPDSfjpd85WwIzNKkpSTY...

6.5CVSS7.1AI score0.01201EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/05 5:44 p.m.•14 views

brave-browser v1.97.8

Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...

6AI score
SaveExploits0References8
OSV
OSV
•added 2026/09/05 6:03 a.m.•9 views

ROOT-OS-UBUNTU-2404-CVE-2025-40263 CVE-2025-40263 in linux - Patched by Root

Root has patched CVE-2025-40263 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

5.9AI score0.00193EPSS
SaveExploits0
Rows per page
Query Builder