Lucene search
+L

258824 matches found

Tenable Nessus
Tenable Nessus
added yesterday3 views

HP LaserJet Printers Server-Side Request Forgery (CVE-2023-35175)

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model. This plugin only works with Tenable.ot. Please visit...

9.8CVSS7.9AI score0.01849EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added yesterday3 views

HP LaserJet Printers Classic Buffer Overflow (CVE-2023-27972)

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

9.8CVSS7.8AI score0.01486EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2 days ago18 views

totolink-exploit

Totolink N200RS+ / A3002RU RCE Exploit Command injection in c...

5.4AI score
SaveExploits0
GithubExploit
GithubExploit
added 2 days ago22 views

Exploit for CVE-2026-13714

CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate &...

9.8CVSS6AI score0.00462EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2 days ago27 views

Exploit for Unrestricted Upload of File with Dangerous Type in Rsjoomla Rsfiles\!

CVE-2026-57827 — RSFiles! Unauthenticated File Upload → RCE...

10CVSS5.5AI score0.00405EPSS
SaveExploits4
NVD
NVD
added 2 days ago17 views

CVE-2026-16062

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-controlled input in some of its event content fields, allowing users with Contributor-level access and above to inject PHP objects. No POP chain is present in the Event Booking...

6.6CVSS0.0021EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2 days ago8 views

CVE-2026-16062

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-controlled input in some of its event content fields, allowing users with Contributor-level access and above to inject PHP objects. No POP chain is present in the Event Booking...

6.2AI score0.0021EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago21 views

CVE-2026-16062

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-controlled input in some of its event content fields, allowing users with Contributor-level access and above to inject PHP objects. No POP chain is present in the Event Booking...

6.6CVSS6.2AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2 days ago33 views

CVE-2026-16062 Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ Content

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-controlled input in some of its event content fields, allowing users with Contributor-level access and above to inject PHP objects. No POP chain is present in the Event Booking...

0.0021EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2 days ago7 views

Linux Distros Unpatched Vulnerability : CVE-2026-67326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.50 fails to validate newline characters in the section parameter of configwriter, allowing attackers to inject arbitrary section headers in...

7.3CVSS6.5AI score0.00191EPSS
SaveExploits0References2
NVD
NVD
added 3 days ago8 views

CVE-2026-67326

GitPython before 3.1.50 fails to validate newline characters in the section parameter of configwriter, allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged core section with hooksPath pointing to attacker-controlled directories,...

7.3CVSS0.00191EPSS
SaveExploits0References2
NVD
NVD
added 3 days ago7 views

CVE-2026-67305

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...

9.4CVSS0.00489EPSS
SaveExploits0References2
Cvelist
Cvelist
added 3 days ago29 views

CVE-2026-67326 GitPython before 3.1.50 Newline Injection via config_writer section

GitPython before 3.1.50 fails to validate newline characters in the section parameter of configwriter, allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged core section with hooksPath pointing to attacker-controlled directories,...

7.3CVSS0.00191EPSS
SaveExploits0References2
OSV
OSV
added 3 days ago5 views

CVE-2026-67326 GitPython before 3.1.50 Newline Injection via config_writer section

GitPython before 3.1.50 fails to validate newline characters in the section parameter of configwriter, allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged core section with hooksPath pointing to attacker-controlled directories,...

7.3CVSS6.4AI score
SaveExploits0References4
EUVD
EUVD
added 3 days ago9 views

EUVD-2026-51814

GitPython before 3.1.50 fails to validate newline characters in the section parameter of configwriter, allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged core section with hooksPath pointing to attacker-controlled directories,...

7.3CVSS6.4AI score0.00191EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 3 days ago7 views

CVE-2026-67326

GitPython before 3.1.50 fails to validate newline characters in the section parameter of configwriter, allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged core section with hooksPath pointing to attacker-controlled directories,...

7.3CVSS6.4AI score0.00191EPSS
SaveExploits0References3
OSV
OSV
added 3 days ago5 views

CVE-2026-67340 ArcadeDB before 26.7.2 Remote Code Execution via Trigger Scripts

ArcadeDB before 26.7.2 arcadedb-engine allows trigger scripts to look up host classes in java.lang. via Java.type because ScriptTriggerExecutor adds java.lang. to the allowed packages. An authenticated user with UPDATESCHEMA permission can create a JavaScript trigger that invokes...

9.3CVSS5.7AI score
SaveExploits0References4
CVE
CVE
added 3 days ago12 views

CVE-2026-67326

GitPython prior to 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing an attacker to inject arbitrary section headers into .git/config. Attackers can inject newlines to forge a [core] section with hooksPath pointing to attacker-controlled directories...

7.3CVSS6.4AI score0.00191EPSS
SaveExploits0References2
EUVD
EUVD
added 3 days ago9 views

EUVD-2026-51862

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...

9.4CVSS6.8AI score0.00489EPSS
SaveExploits0References2
Cvelist
Cvelist
added 3 days ago29 views

CVE-2026-67305 FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...

9.4CVSS0.00489EPSS
SaveExploits0References2
Rows per page
Query Builder