266295 matches found
CVE-2026-72840
OpenWrt LuCI exposes an overly permissive ACL in the luci-mod-system-mounts component that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can use ubus file.write to append arbitrary cron ent...
Exploit for Path Traversal in Apache Http_Server
Портфолио. Усольцев Глеб Студент 2 курса, Институт компьютерн...
Malicious code in root-locator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2028000ac5395ba0f5ddda0c3d9003770de8f14847dd2cebaeb04031bbcf9ce8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in react-shield (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 407d23edc671619cbd75b7d6ba9aa57d1d7a591669dac19d1c2413a78e586362 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CVE-2026-17101
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...
CVE-2026-72776 AgenticSeek Unauthenticated RCE via /query API Endpoint
AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...
CVE-2026-73420 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
GHSA-HF6X-8P5F-CGMF vulnerabilities
Vulnerabilities for packages: nrjmx, cassandra-reaper, akhq, apicurio-registry, thingsboard, druid...
CVE-2026-17482
IBM Documentation Offline (versions 1.0.0–1.4.1) is affected by CVE-2026-17482: improper control of file paths in the embedded server could allow a remote attacker to execute arbitrary code. Impact is high (CVSS 3.1: 9.8; NETWORK, NONE user interaction). The vulnerability is tied to external cont...
CVE-2026-17481
CVE-2026-17481 affects IBM Documentation Offline (Windows/macOS desktop bundle) 1.0.0–1.4.1. The issue is Arbitrary Code Execution via improper output neutralization for logs in the embedded server’s handling, enabling a remote attacker with network-adjacent access (attack vector) and no user int...
CVE-2026-17481 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs...
CVE-2026-17473
IBM Documentation Offline 1.0.0–1.4.1 is affected by CVE-2026-17473: information disclosure via path traversal caused by improper limitation of a pathname to a restricted directory. A remote attacker could read arbitrary files. CVSS v3.1 base score 7.5 (HIGH). Remediation: upgrade to 1.5.1.
CVE-2026-17473 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory...
CVE-2026-17468 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key...
CVE-2026-17468 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key...
CVE-2026-17468
CVE-2026-17468 affects IBM Documentation Offline (versions 1.0.0–1.4.1). The embedded server uses a hardcoded session secret, enabling a remote attacker to forge valid session tokens and manipulate client-side state (session forgery). This is part of multiple vulnerabilities in the IBM Documentat...
CVE-2026-17101 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...
CVE-2026-17101
CVE-2026-17101 affects IBM i on versions 7.6, 7.5, 7.4, and 7.3 and could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication. The IBM bulletin and NVD entries corroborate a high-severity (CVSS v3.1 base score 8.3) impact with network a...
