Lucene search
+L

16468 matches found

Cvelist
Cvelist
added 3 days ago33 views

CVE-2026-54768 WPGraphQL has deprecated `user` field on SendPasswordResetEmailPayload that leaks user existence + profile (defeats explicit anti-enumeration design)

WPGraphQL provides a GraphQL API for WordPress sites. From 2.0.0 until 2.15.1, the deprecated user field on SendPasswordResetEmailPayload lets an unauthenticated caller distinguish existing author-class accounts through the sendPasswordResetEmail mutation and obtain public profile fields. This...

6.9CVSS0.00278EPSS
SaveExploits0References2
EUVD
EUVD
added 3 days ago7 views

EUVD-2026-51676

WPGraphQL provides a GraphQL API for WordPress sites. From 2.0.0 until 2.15.1, the deprecated user field on SendPasswordResetEmailPayload lets an unauthenticated caller distinguish existing author-class accounts through the sendPasswordResetEmail mutation and obtain public profile fields. This...

6.9CVSS5.5AI score0.00278EPSS
SaveExploits0References2
NVD
NVD
added 3 days ago8 views

CVE-2026-14919

The ShopMonitor.io WordPress plugin before 1.2.0 does not properly restrict its email-rerouting test mode, gating it behind a trusted-source check that is satisfiable with client-supplied request headers, allowing unauthenticated attackers to redirect outgoing emails, including the WordPress...

9.8CVSS0.00277EPSS
SaveExploits0References1
Nuclei
Nuclei
added 3 days ago16 views

LG LED Assistant - Unauthenticated Password Reset

The /api/changePw endpoint in LG LED Assistant allows unauthenticated password resets when requests are considered to come from localhost. An attacker can spoof the X-Forwarded-For header with value 127.0.0.1 to trigger the behavior and receive a success response. id: CVE-2024-2862 info: name: LG...

9.8CVSS5.5AI score0.51001EPSS
SaveExploits0References3
CVE
CVE
added 3 days ago20 views

CVE-2026-14919

The vulnerability CVE-2026-14919 affects the ShopMonitor.io WordPress plugin prior to 1.2.0. The plugin’s email-rerouting test mode is inadequately restricted by a trusted-source check that can be satisfied with client-supplied request headers, enabling unauthenticated attackers to redirect outgo...

9.8CVSS5.9AI score0.00277EPSS
SaveExploits0References1
Cvelist
Cvelist
added 3 days ago38 views

CVE-2026-14919 ShopMonitor.io < 1.2.0 - Unauthenticated Administrator Account Takeover via Password-Reset Email Reroute

The ShopMonitor.io WordPress plugin before 1.2.0 does not properly restrict its email-rerouting test mode, gating it behind a trusted-source check that is satisfiable with client-supplied request headers, allowing unauthenticated attackers to redirect outgoing emails, including the WordPress...

0.00277EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 3 days ago9 views

PT-2026-66774

/misc/workspace/adhoc connect server, part of the Workspaces feature introduced in pgAdmin 4 9.0, when passed the id of an existing server, clones that server via Server.clone, which copies every column from the source row, including user id, shared, shared username, and the stored credential...

9.6CVSS5.5AI score0.003EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 3 days ago9 views

PT-2026-66871

Name of the Vulnerable Software and Affected Versions WPGraphQL versions 2.0.0 through 2.15.0 Description An unauthenticated caller can distinguish existing author-class accounts and obtain public profile fields through the sendPasswordResetEmail mutation. While the mutation is designed to preven...

6.9CVSS5.5AI score0.00278EPSS
SaveExploits0References8
NVD
NVD
added 4 days ago9 views

CVE-2026-18064

An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...

8.2CVSS0.00339EPSS
SaveExploits0References3
Cvelist
Cvelist
added 4 days ago35 views

CVE-2026-18064 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference

An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...

8.2CVSS0.00339EPSS
SaveExploits0References3
OSV
OSV
added 4 days ago5 views

CVE-2026-18064 NASA Core Flight System (cFS) Health & Safety (HS) Application NULL Pointer Dereference

An incomplete fix for CVE-2026-15352 in the NASA core Flight System cFS Health and Safety HS application leaves a separate NULL pointer dereference reachable in versions through 7.0.1. An attacker who can trigger the affected command under specific conditions could cause the HS application to...

8.2CVSS5.5AI score0.00339EPSS
SaveExploits0References5
NVD
NVD
added 4 days ago6 views

CVE-2026-67594

Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the unattached CipiAuth middleware, which is registered but never applied to any route in the API routing configuration. Attackers ca...

9.8CVSS0.00455EPSS
SaveExploits0References2
CVE
CVE
added 4 days ago26 views

CVE-2026-67594

Summary (CVE-2026-67594): Spikster (commit e1cdf8c) contains a missing authentication flaw in the API route group due to the CipiAuth middleware being registered but never applied. This allows unauthenticated remote attackers to access approximately 50 API endpoints, enabling enumeration and prov...

9.8CVSS6AI score0.00455EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago33 views

CVE-2026-67594 Spikster Missing Authentication via API Route Group

Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the unattached CipiAuth middleware, which is registered but never applied to any route in the API routing configuration. Attackers ca...

9.8CVSS0.00455EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 4 days ago4 views

SUSE CVE-2026-52809

Gogs is an open source self-hosted Git service. Prior to 0.14.3, password-reset tokens are generated using conf.Auth.ActivateCodeLives the account-activation lifetime, not conf.Auth.ResetPasswordCodeLives. The token lifetime is baked into the token itself at generation time and is re-extracted fr...

6.8CVSS7.6AI score0.00151EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 4 days ago5 views

SUSE CVE-2026-55077

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the PUT /api/v2/users/user/password endpoint authorized only ActionUpdatePersonal and did not prevent a user-admin from resetting an owner account's passwor...

7.2CVSS7.7AI score0.00336EPSS
SaveExploits0References2
NVD
NVD
added 4 days ago8 views

CVE-2026-18363

A logic vulnerability in the password reset token validation routine implemented by osTicket in versions prior to v1.17.8 and v1.18.4. During the password reset process, the application retrieves the timestamp associated with the provided token and checks whether the configured validity period ha...

9.1CVSS0.00298EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago23 views

CVE-2026-18363

osTicket suffers a logic flaw in its password reset flow: for versions &lt; v1.17.8 and

9.1CVSS5.9AI score0.00298EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago4 views

CVE-2026-18363

A logic vulnerability in the password reset token validation routine implemented by osTicket in versions prior to v1.17.8 and v1.18.4. During the password reset process, the application retrieves the timestamp associated with the provided token and checks whether the configured validity period ha...

9.1CVSS5.9AI score0.00298EPSS
SaveExploits0References2
EUVD
EUVD
added 4 days ago13 views

EUVD-2026-51068

A logic vulnerability in the password reset token validation routine implemented by osTicket in versions prior to v1.17.8 and v1.18.4. During the password reset process, the application retrieves the timestamp associated with the provided token and checks whether the configured validity period ha...

9.1CVSS5.9AI score0.00298EPSS
SaveExploits0References1
Rows per page
Query Builder