Lucene search
+L

259015 matches found

Positive Technologies
Positive Technologies
added 2 days ago9 views

PT-2026-67455

WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content through the droplet Code field, which is written verbatim to a publicly accessible PHP file with no...

8.6CVSS6.5AI score0.00644EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2 days ago5 views

HP LaserJet Printers Server-Side Request Forgery (CVE-2023-35175)

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model. This plugin only works with Tenable.ot. Please visit...

9.8CVSS7.9AI score0.01849EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2 days ago7 views

HP LaserJet Printers Out-of-bounds Write (CVE-2023-27973)

Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

9.8CVSS7.8AI score0.01486EPSS
SaveExploits0References2
Redos
Redos
added 2 days ago6 views

ROS-20260803-73-0009

The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially crafted HTTP request...

9.2CVSS8.2AI score0.03596EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
added 2 days ago6 views

HP LaserJet Printers Classic Buffer Overflow (CVE-2023-27972)

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

9.8CVSS7.8AI score0.01486EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 3 days ago19 views

totolink-exploit

Totolink N200RS+ / A3002RU RCE Exploit Command injection in c...

5.4AI score
SaveExploits0
GithubExploit
GithubExploit
added 3 days ago23 views

Exploit for CVE-2026-13714

CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate &...

9.8CVSS6AI score0.00462EPSS
SaveExploits1
GithubExploit
GithubExploit
added 3 days ago27 views

Exploit for Unrestricted Upload of File with Dangerous Type in Rsjoomla Rsfiles\!

CVE-2026-57827 — RSFiles! Unauthenticated File Upload → RCE...

10CVSS5.5AI score0.00405EPSS
SaveExploits4
NVD
NVD
added 3 days ago23 views

CVE-2026-16062

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-controlled input in some of its event content fields, allowing users with Contributor-level access and above to inject PHP objects. No POP chain is present in the Event Booking...

6.6CVSS0.0021EPSS
SaveExploits0References1
CVE
CVE
added 3 days ago23 views

CVE-2026-16062

CVE-2026-16062 affects the WordPress plugin “Event Booking Manager for WooCommerce” versions prior to 5.3.7. The issue is deserialization of user-controlled input in certain event content fields, allowing users with Contributor-level access and above to inject PHP objects. The plugin itself has n...

6.6CVSS6.2AI score0.0021EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 3 days ago9 views

CVE-2026-16062

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-controlled input in some of its event content fields, allowing users with Contributor-level access and above to inject PHP objects. No POP chain is present in the Event Booking...

6.2AI score0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
added 3 days ago35 views

CVE-2026-16062 Event Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ Content

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-controlled input in some of its event content fields, allowing users with Contributor-level access and above to inject PHP objects. No POP chain is present in the Event Booking...

0.0021EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 3 days ago10 views

Linux Distros Unpatched Vulnerability : CVE-2026-67326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.50 fails to validate newline characters in the section parameter of configwriter, allowing attackers to inject arbitrary section headers in...

7.3CVSS6.5AI score0.00191EPSS
SaveExploits0References2
NVD
NVD
added 4 days ago8 views

CVE-2026-67326

GitPython before 3.1.50 fails to validate newline characters in the section parameter of configwriter, allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged core section with hooksPath pointing to attacker-controlled directories,...

7.3CVSS0.00191EPSS
SaveExploits0References2
NVD
NVD
added 4 days ago7 views

CVE-2026-67305

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...

9.4CVSS0.00489EPSS
SaveExploits0References2
OSV
OSV
added 4 days ago5 views

CVE-2026-67326 GitPython before 3.1.50 Newline Injection via config_writer section

GitPython before 3.1.50 fails to validate newline characters in the section parameter of configwriter, allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged core section with hooksPath pointing to attacker-controlled directories,...

7.3CVSS6.4AI score
SaveExploits0References4
Cvelist
Cvelist
added 4 days ago33 views

CVE-2026-67326 GitPython before 3.1.50 Newline Injection via config_writer section

GitPython before 3.1.50 fails to validate newline characters in the section parameter of configwriter, allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged core section with hooksPath pointing to attacker-controlled directories,...

7.3CVSS0.00191EPSS
SaveExploits0References2
EUVD
EUVD
added 4 days ago11 views

EUVD-2026-51814

GitPython before 3.1.50 fails to validate newline characters in the section parameter of configwriter, allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged core section with hooksPath pointing to attacker-controlled directories,...

7.3CVSS6.4AI score0.00191EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 4 days ago8 views

CVE-2026-67326

GitPython before 3.1.50 fails to validate newline characters in the section parameter of configwriter, allowing attackers to inject arbitrary section headers into .git/config. Attackers can inject newlines to create a forged core section with hooksPath pointing to attacker-controlled directories,...

7.3CVSS6.4AI score0.00191EPSS
SaveExploits0References3
CVE
CVE
added 4 days ago15 views

CVE-2026-67326

GitPython prior to 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing an attacker to inject arbitrary section headers into .git/config. Attackers can inject newlines to forge a [core] section with hooksPath pointing to attacker-controlled directories...

7.3CVSS6.4AI score0.00191EPSS
SaveExploits0References2
Rows per page
Query Builder