Lucene search
+L

43502 matches found

ATTACKERKB
ATTACKERKB
added 2026/08/14 12:45 a.m.9 views

CVE-2026-19764

A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. This affects an unknown part of the file /app/users/getpwd.php. Such manipulation of the argument sip leads to sql injection. The attack can be executed remotely. The exploit is publicly...

7.5CVSS7.2AI score0.00254EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/08/14 12:31 a.m.11 views

EUVD-2026-58517

A vulnerability was found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. This affects the function parse-pdf of the file src/index.ts of the component PDF Parsing. Performing a manipulation of the argument pdfUrl results in server-side request forgery. It is...

6.5CVSS6.1AI score0.0027EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/08/14 12:31 a.m.10 views

EUVD-2026-58545

A flaw has been found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. The affected element is the function axios.get of the file src/index.ts of the component parse-csv tool. This manipulation of the argument csvUrl causes server-side request forgery. The attack...

6.5CVSS6AI score0.0027EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/14 12:15 a.m.27 views

CVE-2026-19763

DTStack Taier 1.4.0 is affected by a path traversal flaw in FileUtils.deleteDirectory (ClusterController.java, Cluster Creation). The vulnerability stems from manipulating the clusterName argument, enabling potential remote exploitation. The issue is mitigated by upgrading to Taier 1.5.0 and appl...

5.1CVSS4.9AI score0.00382EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/14 12:15 a.m.40 views

CVE-2026-19763 DTStack Taier Cluster Creation ClusterController.java FileUtils.deleteDirectory path traversal

A vulnerability was determined in DTStack Taier 1.4.0. Affected by this issue is the function FileUtils.deleteDirectory of the file ClusterController.java of the component Cluster Creation. This manipulation of the argument clusterName causes path traversal. Remote exploitation of the attack is...

5.1CVSS0.00382EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/14 12:00 a.m.37 views

CVE-2026-19762 DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal

A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerability is the function Paths.ge of the file FileChunkController.java of the component Chunk-Check Endpoint. The manipulation of the argument Name results in path traversal. The attack may be launched remotely. The exploit h...

7.5CVSS0.00424EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/14 12:00 a.m.11 views

PT-2026-71970

Name of the Vulnerable Software and Affected Versions TOTOLINK A800R version 4.1.2cu.5137 B20200730 Description A remote attack is possible due to a stack-based buffer overflow in the setIpQosRules function within the /cgi-bin/cstecgi.cgi file of the firewall.so component. This issue occurs when...

9CVSS9.1AI score0.00466EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/08/14 12:00 a.m.8 views

PT-2026-71937

Name of the Vulnerable Software and Affected Versions DTStack Taier version 1.4.0 Description A path traversal issue exists within the Cluster Creation component in the ClusterController.java file. The vulnerability occurs in the FileUtils.deleteDirectory function when the clusterName argument is...

5.1CVSS4.6AI score0.00382EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/08/14 12:00 a.m.13 views

PT-2026-72041

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend Customer Detail Feature. Performing a manipulation of the argument ID results in authorization bypass. The attack may ...

4.3CVSS5.1AI score0.00294EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/14 12:00 a.m.9 views

PT-2026-72034

Name of the Vulnerable Software and Affected Versions Webkul Bagisto versions prior to 2.4.5 Description An authorization bypass exists in the Admin Customer Impersonation Feature within the file /admin/customers/login-as-customer/. A remote attacker can exploit this by manipulating the ID...

5.8CVSS4.7AI score0.00309EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/08/13 11:30 p.m.9 views

CVE-2026-19758

A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely...

7.5CVSS6.9AI score0.00424EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/08/13 10:30 p.m.24 views

CVE-2026-19756

The vulnerability CVE-2026-19756 affects Dromara lamp-cloud (Code Generator) in DefGenProjectController.java, where improper handling of outputDir/parent/projectPrefix enables path traversal. The issue allows remote exploitation with a Proof-of-Concept exploit disclosed publicly; impact and speci...

6.5CVSS6.1AI score0.00288EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/13 9:17 p.m.5 views

CVE-2026-19749

A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected by this vulnerability is an unknown functionality of the component RTSP/ONVIF. Performing a manipulation results in missing authentication. It is possible to...

6.3CVSS0.00402EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/13 3:19 p.m.6 views

CVE-2026-53793

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...

9.1CVSS0.00393EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/13 2:38 p.m.7 views

CVE-2026-53793

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...

9.1CVSS5.2AI score0.00393EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/13 2:38 p.m.8 views

EUVD-2026-58101

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...

9.1CVSS5.2AI score0.00393EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/13 2:38 p.m.3 views

CVE-2026-53793 rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...

9.1CVSS5.3AI score
SaveExploits0References6
Redos
Redos
added 2026/08/13 12:00 a.m.6 views

ROS-20260813-73-0054

The vulnerability in portainer-ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain increased privileges...

7.1CVSS5.4AI score0.00493EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.3 views

PT-2026-71892

A vulnerability was found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. This affects the function parse-pdf of the file src/index.ts of the component PDF Parsing. Performing a manipulation of the argument pdfUrl results in server-side request forgery. It is...

6.5CVSS6AI score0.0027EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.4 views

PT-2026-71631

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A path confinement bypass allows remote clients to escape the intended inner-module root confinement. This occurs when the module root contains a /./ boundary marker, enabling the construction of paths...

9.1CVSS5AI score0.00509EPSS
SaveExploits0References87
Rows per page
Query Builder