Lucene search
+L

599956 matches found

Cvelist
Cvelist
added 2026/09/03 9:47 a.m.37 views

CVE-2026-76176 Multiple vulnerabilities in Ocsreports for OCS Inventory NG

SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admindouble due to improper processing of the values in the ID field included in the selectedgrpdupli parameter. An authenticated user with operator privileges can manipulate these values to alter the SQL queries executed ...

8.6CVSS0.0033EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 9:47 a.m.18 views

CVE-2026-76176

CVE-2026-76176 is a SQL injection vulnerability in Ocsreports for OCS Inventory NG , located in the endpoint /ocsreports/index.php?function=admin_double. The root cause is improper processing of values in the ID field of the selected_grp_dupli[] parameter. An authenticated user with operator priv...

8.6CVSS6AI score0.0033EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/09/03 9:45 a.m.9 views

CVE-2026-14673

An untrusted search path vulnerability in PostgreSQL's amcheck module allows a user with EXECUTE privileges to escalate privileges or execute arbitrary code. By setting a malicious search path before invoking an amcheck function, an attacker can hijack execution to run arbitrary SQL functions wit...

3.8CVSS6.2AI score0.00174EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/03 9:45 a.m.9 views

EUVD-2026-70370

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It...

5.3CVSS5.5AI score0.00522EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2026/09/03 9:45 a.m.11 views

CVE-2026-85100 2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It...

5.3CVSS5.5AI score0.00522EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/09/03 9:45 a.m.36 views

CVE-2026-85100 2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It...

5.3CVSS0.00522EPSS
SaveExploits0References8
CVE
CVE
added 2026/09/03 9:45 a.m.11 views

CVE-2026-85100

A resource consumption vulnerability in 2FastLabs agent-squad (versions up to 1.1.4 ) affects the function AgentSquad.routeRequest within the Streaming Agent Response Workflow component (file agent-squad/typescript/src/orchestrator.ts). The flaw allows a remote attacker with low privileges to tri...

5.3CVSS5.5AI score0.00522EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/03 9:45 a.m.4 views

CVE-2026-85100 2FastLabs agent-squad Streaming Agent Response Workflow orchestrator.ts AgentSquad.routeRequest resource consumption

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It...

5.3CVSS5.3AI score
SaveExploits0References10
EUVD
EUVD
added 2026/09/03 9:44 a.m.8 views

EUVD-2026-70369

SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...

8.6CVSS5.9AI score0.0033EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 9:44 a.m.16 views

CVE-2026-76175

Ocsreports for OCS Inventory NG is affected by a SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. An authenticated user with operator privileges can supply input that is incorporated into an SQL query without proper parameterisation or ...

8.6CVSS5.9AI score0.0033EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/03 9:44 a.m.37 views

CVE-2026-76175 Multiple vulnerabilities in Ocsreports for OCS Inventory NG

SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...

8.6CVSS0.0033EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/09/03 9:44 a.m.7 views

CVE-2026-76175

SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...

8.6CVSS5.7AI score0.0033EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/09/03 9:44 a.m.12 views

CVE-2026-76175 Multiple vulnerabilities in Ocsreports for OCS Inventory NG

SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...

8.6CVSS5.9AI score0.0033EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 9:41 a.m.9 views

threatcl v0.6.8

threatcl Threat Modeling with HCL What happened to hcltm? hcltm has been renamed to threatcl. Welcome! Overview !TIP Want to read the new documentation? Head over to threatcl.dev There are many different ways in which a threat model can be documented. From a simple text file, to more in-depth wor...

5.8AI score
SaveExploits0References27
Kitploit
Kitploit
added 2026/09/03 9:39 a.m.5 views

jmrozanec__cron-utils_CVE-2021-41269_9-1-5

cron-utils 我们定义 cron,并支持它们。 cron-utils 是一个 Java 库,用于定义、解析、验证和迁移 cron,以及获取它们的人类可读描述。该项目遵循语义化版本约定,提供 OSGi 元数据,并使用 Apache 2.0 许可证。 下载 cron-utils 可在 Maven 中央仓库 获取。 root@kitploit: com.cronutils cron-utils 9.2.1 对于 Android 开发者,cron-utils 7.0.0 要求 Android 26 及以上版本。对于更早的 Android 版本,请考虑使用 cron-utils 6.0.6...

10CVSS7.1AI score0.04047EPSS
SaveExploits1References9
Kitploit
Kitploit
added 2026/09/03 9:30 a.m.6 views

IDAssist v2.3.0

IDAssist AI-Powered Reverse Engineering Plugin for IDA Pro Author: Jason Tang Description IDAssist is an IDA Pro plugin that integrates LLM-powered analysis directly into IDA's interface, providing AI-assisted binary reverse engineering through configurable LLM providers, semantic knowledge graph...

5.9AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/03 9:30 a.m.8 views

MinimalReproducer

Tras importantes esfuerzos, lo reduje a un replicador mínimo. Este es solo un proyecto vacío para demostrar el problema con el uso de dependency-check-maven que me veo obligado a hacer por las reglas de mi empresa. Revisa el pom.xml y verifica: mvn org.owasp:dependency-check-maven:RELEASE:aggrega...

9.1CVSS7.1AI score0.08691EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/09/03 9:23 a.m.8 views

CVE-2026-82417

A flaw was found in qs. The qs.stringify function, responsible for serializing objects, does not properly validate the isBuffer property of an object's constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then...

7.5CVSS5.9AI score0.00261EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/03 9:22 a.m.7 views

CVE-2024-7593

CVE-2024-7593 检测 这种检测方法的工作原理是什么? 该模板会匹配以下版本,如果匹配到,则认为主机存在漏洞: root@kitploit: - "22.2" - "22.3" - "22.3R2" - "22.5R1" - "22.6R1" - "22.7R1" 为了防止产生误报,它还会匹配以下内容: root@kitploit: - type: word part: body words: - "Login Virtual Traffic Manager" 如何运行此脚本? 1. 从这里下载Nuclei 2. 将模板复制到本地系统 3. 运行以下命令:nuclei -u...

9.8CVSS8.4AI score0.9999EPSS
SaveExploits4References2
RedHat Linux
RedHat Linux
added 2026/09/03 9:19 a.m.8 views

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

7.5CVSS6.9AI score0.00798EPSS
SaveExploits0References8
Rows per page
Query Builder