Lucene search
+L

22750 matches found

Positive Technologies
Positive Technologies
added 2026/09/14 12:00 a.m.10 views

PT-2026-91445

A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup 3x3 of the file libavfilter/vf convolution.c of the component Convolution Filter. Such manipulation leads to out-of-bounds read. The attack can be executed remotely. The...

7.5CVSS5.8AI score0.00242EPSS
SaveExploits0References8
CVE
CVE
added 2026/09/13 11:45 p.m.24 views

CVE-2026-90606

CVE-2026-90606 is a buffer overflow in the boa component of Totolink A3002MU (firmware Hh-B20211125.1046). The vulnerable function is formIpv6Setup in the file /boafrm/formIpv6Setup; manipulation of the argument static_ipv6 triggers the overflow. The vulnerability is exploitable remotely with low...

9.9CVSS8.5AI score0.00493EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/13 11:15 p.m.39 views

CVE-2026-90604 Totolink A3002MU Anchor Tag cross site scripting

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an unknown part of the component Anchor Tag Handler. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and ma...

5.1CVSS0.00199EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/13 11:15 p.m.24 views

CVE-2026-90604

A cross-site scripting (XSS) flaw exists in the Anchor Tag Handler component of the Totolink A3002MU router running firmware Hh-B20211125.1046 . The vulnerability is remotely exploitable and requires low privileges plus user interaction. A proof-of-concept exploit has been released to the public ...

5.1CVSS3.6AI score0.00199EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/13 9:17 p.m.8 views

CVE-2026-90594

A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.checkUserPermission of the file /rpc/service/PermissionService.java of the component Permission Service. The manipulation leads to missing authorization. Remote...

6.5CVSS0.00209EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/13 8:45 p.m.16 views

CVE-2026-90594

A missing authorization (fail-open) vulnerability in the Permission Service of wxiaoqi Spring-Cloud-Platform versions 3.0.1 and 3.1.0 affects the function PermissionService.checkUserPermission in /rpc/service/PermissionService.java. The flaw allows remote attackers with low privileges to bypass p...

6.5CVSS6.1AI score0.00209EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/13 8:45 p.m.32 views

CVE-2026-90594 wxiaoqi Spring-Cloud-Platform Permission Service PermissionService.java PermissionService.checkUserPermission authorization

A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.checkUserPermission of the file /rpc/service/PermissionService.java of the component Permission Service. The manipulation leads to missing authorization. Remote...

6.5CVSS0.00209EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/09/13 8:45 p.m.11 views

EUVD-2026-77092

A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0. This vulnerability affects the function PermissionService.checkUserPermission of the file /rpc/service/PermissionService.java of the component Permission Service. The manipulation leads to missing authorization. Remote...

6.5CVSS6.1AI score0.00209EPSS
SaveExploits0References7
NVD
NVD
added 2026/09/13 8:16 p.m.9 views

CVE-2026-90581

A vulnerability was determined in cym1102 nginxWebUI up to 4.4.2. This issue affects the function MainController.autoUpdate of the file /adminPage/main/autoUpdate. This manipulation of the argument url causes code injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS0.00242EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/13 7:30 p.m.33 views

CVE-2026-90581 cym1102 nginxWebUI autoUpdate MainController.autoUpdate code injection

A vulnerability was determined in cym1102 nginxWebUI up to 4.4.2. This issue affects the function MainController.autoUpdate of the file /adminPage/main/autoUpdate. This manipulation of the argument url causes code injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS0.00242EPSS
SaveExploits0References7
OSV
OSV
added 2026/09/13 7:30 p.m.6 views

CVE-2026-90581 cym1102 nginxWebUI autoUpdate MainController.autoUpdate code injection

A vulnerability was determined in cym1102 nginxWebUI up to 4.4.2. This issue affects the function MainController.autoUpdate of the file /adminPage/main/autoUpdate. This manipulation of the argument url causes code injection. Remote exploitation of the attack is possible. The exploit has been...

5.3CVSS5.5AI score
SaveExploits0References9
EUVD
EUVD
added 2026/09/13 7:30 p.m.8 views

EUVD-2026-77071

A vulnerability was determined in cym1102 nginxWebUI up to 4.4.2. This issue affects the function MainController.autoUpdate of the file /adminPage/main/autoUpdate. This manipulation of the argument url causes code injection. Remote exploitation of the attack is possible. The exploit has been...

6.5CVSS6.2AI score0.00242EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/13 7:30 p.m.15 views

CVE-2026-90581

nginxWebUI (by cym1102, versions up to 4.4.2 ) is vulnerable to code injection in the MainController.autoUpdate function located at /adminPage/main/autoUpdate. The root cause is manipulation of the url argument, allowing a remote attacker with low privileges (no user interaction required) to exec...

6.5CVSS6.2AI score0.00242EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/09/13 7:00 p.m.9 views

EUVD-2026-77064

A vulnerability has been found in cheshire-cat-ai Cheshire Cat AI up to 1.9.2. This affects the function authorizehttpkey of the file core/cat/factory/customauthhandler.py. The manipulation of the argument userid leads to missing authentication. The attack may be initiated remotely. The exploit h...

7.5CVSS6.7AI score0.00391EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 5:17 p.m.14 views

CVE-2025-5548

🚀 CVE-2025-5548 - Explotación de FreeFloat FTP Server 1.0 Análisis profesional de vulnerabilidades y explotación completa de desbordamiento de búfer remoto 🎯 Aspectos Destacados del Proyecto Caso de estudio completo del mundo real de CVE-2025-5548 desbordamiento de búfer remoto basado en pila en...

9.8CVSS8AI score0.14985EPSS
SaveExploits15
NVD
NVD
added 2026/09/13 5:16 p.m.9 views

CVE-2026-90571

A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-manager-web/src/main/webapp/WEB-INF/jsp/order-print.jsp of the component Order Printing. Performing a manipulation results in cross site scripting. Remote...

5.3CVSS0.00273EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/13 5:00 p.m.9 views

EUVD-2026-77052

A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-manager-web/src/main/webapp/WEB-INF/jsp/order-print.jsp of the component Order Printing. Performing a manipulation results in cross site scripting. Remote...

5.3CVSS3.6AI score0.00273EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/13 5:00 p.m.16 views

CVE-2026-90571

Exrick xmall , an open-source e-commerce platform, is affected by a Cross-Site Scripting (XSS) vulnerability in the Order Printing component. The flaw resides in the file xmall-manager-web/src/main/webapp/WEB-INF/jsp/order-print.jsp, where manipulation of an unknown function allows remote exploit...

5.3CVSS3.6AI score0.00273EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/13 5:00 p.m.39 views

CVE-2026-90571 Exrick xmall Order Printing order-print.jsp cross site scripting

A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-manager-web/src/main/webapp/WEB-INF/jsp/order-print.jsp of the component Order Printing. Performing a manipulation results in cross site scripting. Remote...

5.3CVSS0.00273EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/13 2:16 p.m.15 views

CVE-2026-90526

A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/saveclass.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of the attack is possible. The exploit has...

7.5CVSS0.00431EPSS
SaveExploits0References6
Rows per page
Query Builder