Lucene search
+L

83402 matches found

CVE
CVE
added 2026/09/10 1:41 p.m.19 views

CVE-2026-88921

MISP (versions ≤2.5.45) contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, used during PDF report export via the convert_markdown_to_pdf module. The attribute(), objectAttribute(), object(), and tag() methods interpolated user-controlled fields (attribute type...

5.1CVSS6.1AI score0.00358EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/10 1:41 p.m.7 views

CVE-2026-88921 MISP: Unescaped HTML Injection in PDF Report Element Rendering

MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...

5.1CVSS6AI score
SaveExploits0References4
CVE
CVE
added 2026/09/10 1:05 p.m.7 views

CVE-2026-88893

OpenPanel 's share lookup procedures fail to validate access controls, allowing unauthenticated callers who possess a share link to retrieve argon2id password hashes and full report configurations (event names, filters, breakdown dimensions). This enables offline password cracking and theft of bu...

8.7CVSS5.7AI score0.00314EPSS
SaveExploits0References2
Circl
Circl
added 2026/09/10 12:40 p.m.13 views

CVE-2026-37004

creationtimestamp| type| source ---|---|--- 2026-09-10 12:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv634bqngq2f...

9.8CVSS5.7AI score0.00548EPSS
SaveExploits0References1
Circl
Circl
added 2026/09/10 12:03 p.m.14 views

CVE-2026-84828

creationtimestamp| type| source ---|---|--- 2026-09-10 12:03:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dfxcpbhrx35ue 2026-09-11 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mvai73fffe22...

6.5CVSS5.7AI score0.00103EPSS
SaveExploits0References2
Circl
Circl
added 2026/09/10 10:05 a.m.15 views

CVE-2026-8323

creationtimestamp| type| source ---|---|--- 2026-09-10 10:05:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cgolcynnqt54y 2026-09-10 10:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv5smfebby2n 2026-09-10 10:20:06+00:00| seen|...

9.3CVSS5.7AI score0.00254EPSS
SaveExploits0References4
Circl
Circl
added 2026/09/10 10:03 a.m.14 views

CVE-2026-88285

creationtimestamp| type| source ---|---|--- 2026-09-10 10:03:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6knaxpydzctnd 2026-09-10 10:07:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv5sm2o7xx2n 2026-09-10 10:30:10+00:00| seen|...

9.4CVSS5.7AI score0.00274EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 7:20 a.m.5 views

nl-kat-coordination

================ What is OpenKAT? OpenKAT aims to monitor, record and analyze the status of information systems. The basic premise is that many of the major security incidents are caused by small errors and known vulnerabilities, and if you find them and resolve them in time your systems and...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 7:04 a.m.28 views

chrome-vuln-scanner

Chrome Vulnerability Scanner A lightweight, dependency-free defensive tool that checks the installed Google Chrome version against known vulnerabilities and produces an easy-to-understand visual HTML report. Alat pertahanan ringan untuk memeriksa versi Google Chrome terhadap kerentanan yang...

8.8CVSS6.7AI score0.00279EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 3:55 a.m.10 views

CVE-Report

CVE-Report...

5.9AI score
SaveExploits0
Circl
Circl
added 2026/09/10 3:20 a.m.12 views

CVE-2026-79941

creationtimestamp| type| source ---|---|--- 2026-09-10 03:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv53suqsbe2y...

9.8CVSS5.7AI score0.0191EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 12:57 a.m.9 views

InvenTree-Path-Traversal-CVE-2026-33531

CVE-2026-33531 — Path Traversal in InvenTree Report Templates Advisory: GHSA-rhc5-7c3r-c769 CVE: CVE-2026-33531 Severity: Medium Published: 2026-03-20 Credit: @alonaki Description A path traversal vulnerability in the report template engine allows a staff-level user to read arbitrary files from t...

7.1CVSS6AI score0.00293EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.11 views

PT-2026-89734

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reports config permission can inject...

8.8CVSS6.1AI score0.00606EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/09/10 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-61909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to anoth...

4.3CVSS5.7AI score0.00204EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/10 12:00 a.m.10 views

PT-2026-89404

OpenPanel share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers. Attackers with a share link can retrieve argon2id password hashes and full report configurations including event names, filters, and breakdown...

8.7CVSS5.7AI score0.00314EPSS
SaveExploits0References3
Circl
Circl
added 2026/09/09 11:00 p.m.9 views

CVE-2026-87929

creationtimestamp| type| source ---|---|--- 2026-09-09 23:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4nbxmirj25 2026-09-14 15:37:19+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvigutfurb2p...

9.8CVSS5.7AI score0.00288EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 9:49 p.m.10 views

CVE-2026-32722

CVE-2026-32722 XSS almacenado en Bloomberg Memray mediante metadatos de línea de comandos sin escapar Introducción Encontré este problema al revisar Memray , el perfilador de memoria de Python de Bloomberg, con una pregunta simple en mente: ¿Pueden los metadatos de tiempo de ejecución controlados...

6.1CVSS6AI score0.00302EPSS
SaveExploits2References2
Circl
Circl
added 2026/09/09 7:40 p.m.10 views

CVE-2026-86098

creationtimestamp| type| source ---|---|--- 2026-09-09 19:40:16+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv4c4nfww72f 2026-09-09 19:40:22+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117242777798627415...

8.3CVSS5.7AI score0.00353EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 6:13 p.m.26 views

nvidia-gpu-security-poc

NVIDIA GPU driver — two findings NVIDIA closed as expected behavior Proof-of-concept code and raw evidence for two findings in the NVIDIA Linux GPU driver, both reported through NVIDIA's VDP and both closed by NVIDIA as intended/expected behavior. Published so the behaviour is documented and...

5.8AI score
SaveExploits0
OSV
OSV
added 2026/09/09 5:19 p.m.6 views

DRUPAL-CONTRIB-2026-140

This module enables you to manage content deletion and provides reports for identifying orphaned content. The module doesn't sufficiently sanitize node titles when displaying the orphaned nodes report. This leads to a persistent cross-site scripting vulnerability XSS. This vulnerability is...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder