Lucene search
+L

42681 matches found

EUVD
EUVD
added 4 hours ago5 views

EUVD-2026-52798

A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.php. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public a...

7.5CVSS6.7AI score
SaveExploits0References7
CVE
CVE
added 5 hours ago6 views

CVE-2026-18775

Technical details are not publicly available in the provided documents. Monitor for updates.

6.5CVSS6AI score
SaveExploits0References5
Cvelist
Cvelist
added 5 hours ago8 views

CVE-2026-18775 NousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgery

A vulnerability has been found in NousResearch hermes-agent up to 0.16.0. This vulnerability affects the function browsersnapshot of the file tools/browsertool.py of the component Browser Tooling. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The...

6.5CVSS
SaveExploits0References5
EUVD
EUVD
added 5 hours ago4 views

EUVD-2026-52764

A flaw has been found in NousResearch hermes-agent up to 0.16.0. This affects the function saveurlimage of the file agent/imagegenprovider.py of the component xAI Image Generation Provider. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has...

6.5CVSS5.1AI score
SaveExploits0References5
CVE
CVE
added 6 hours ago6 views

CVE-2026-18773

The vulnerability CVE-2026-18773 affects the NousResearch Hermes-Agent up to version 2026.6.5. The flaw resides in the Quick Command Handler’s file gateway/run.py, within the function _check_slash_access, leading to incorrect authorization. This enables a remote attacker to exploit the issue (exp...

6.5CVSS6.2AI score
SaveExploits0References5
CVE
CVE
added 7 hours ago6 views

CVE-2026-18766

CVE-2026-18766 affects the chetans9 core-php-admin-panel (up to the commit 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f). The issue is a SQL injection caused by manipulation of the argument filter_col in customers.php. It can be exploited remotely, and the exploit has been published and may be used. ...

6.5CVSS6.4AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added 15 hours ago4 views

CVE-2026-18446

A flaw was found in fast-uri. This vulnerability arises because fast-uri incorrectly parses Uniform Resource Identifiers URIs when a backslash is used in place of a forward slash to introduce the authority component. This discrepancy with Node's native WHATWG URL parser can lead to host confusion...

7.5CVSS5.5AI score0.00221EPSS
SaveExploits0References5
NVD
NVD
added 17 hours ago8 views

CVE-2026-18721

A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown processing of the file /user/sso/apiLogin of the component SSO API Login. The manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely. The exploit has be...

5.3CVSS
SaveExploits0References5
NVD
NVD
added 17 hours ago8 views

CVE-2026-18722

A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is the function in DwDeisgnSurveyController.devSurvey. of the file /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do of the component Survey Handler. The manipulation results in authorization bypass. The attack can be launched...

6.5CVSS
SaveExploits0References5
NVD
NVD
added 18 hours ago9 views

CVE-2026-18720

A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of the file /index.php?plugin/msgWarning/action of the component msgWarning Plugin. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The explo...

6.9CVSS
SaveExploits0References5
Cvelist
Cvelist
added 18 hours ago12 views

CVE-2026-18723 diaowen DWSurvey Survey Status up-survey-status.do improper authorization

A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the component Survey Status Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The...

6.5CVSS
SaveExploits0References5
EUVD
EUVD
added 18 hours ago8 views

EUVD-2026-52572

A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the component Survey Status Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The...

6.5CVSS6.2AI score
SaveExploits0References5
Cvelist
Cvelist
added 18 hours ago12 views

CVE-2026-18722 diaowen DWSurvey dev-survey.do in DwDeisgnSurveyController.devSurvey. authorization

A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is the function in DwDeisgnSurveyController.devSurvey. of the file /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do of the component Survey Handler. The manipulation results in authorization bypass. The attack can be launched...

6.5CVSS
SaveExploits0References5
CVE
CVE
added 18 hours ago14 views

CVE-2026-18722

Technical details (affected product, vulnerable component, root cause, impact, fixes) are not publicly available in the provided documents; monitor for updates.

6.5CVSS6.1AI score
SaveExploits0References5
Nuclei
Nuclei
added 18 hours ago64 views

Cobbler 'XML-RPC' - Authentication Bypass

Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. utils.getsharedsecret always returns -1, which allows anyone to connect to cobbler...

9.8CVSS7.6AI score0.03948EPSS
SaveExploits6References3
Nuclei
Nuclei
added 18 hours ago39 views

Hongjing e-HR 2020 - SQL Injection

A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /wselfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument...

9.8CVSS6.8AI score0.03766EPSS
SaveExploits1References2
Nuclei
Nuclei
added 18 hours ago5 views

Discuz! X5.0 - Authentication Bypass

Discuz! X5.0 20260320 through 20260501 contains an authentication bypass caused by exploitation of a shared cryptographic key and encryption oracle in dbbak.php and loggingctl::loggingmore, letting unauthenticated remote attackers access database backup and restore functions, exploit requires...

9.3CVSS5.5AI score0.04194EPSS
SaveExploits4References4
Cvelist
Cvelist
added 19 hours ago11 views

CVE-2026-18721 kalcaddle kodbox SSO API Login apiLogin redirect

A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown processing of the file /user/sso/apiLogin of the component SSO API Login. The manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely. The exploit has be...

5.3CVSS
SaveExploits0References5
EUVD
EUVD
added 19 hours ago7 views

EUVD-2026-52570

A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This issue affects some unknown processing of the file /user/sso/apiLogin of the component SSO API Login. The manipulation of the argument callbackUrl leads to open redirect. The attack can be initiated remotely. The exploit has be...

5.3CVSS5.1AI score
SaveExploits0References5
CVE
CVE
added 20 hours ago7 views

CVE-2026-18720

The CVE concerns kalcaddle kodbox 1.67 Build 02, specifically the /index.php?plugin/msgWarning/action area of the msgWarning Plugin. The vulnerability allows remote, unauthenticated manipulation leading to improper authorization. Exploitation is reported as possible, with PoC exploit activity obs...

6.9CVSS5.6AI score
SaveExploits0References5
Rows per page
Query Builder