Lucene search
+L

1491 matches found

OSV
OSV
added 2026/04/13 9:2 p.m.4 views

CVE-2026-33905 ImageMagick has an Out-of-Bounds read via -sample operation

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bounds read when an specific offset is set through the sample:offset define that could lead to an out of bounds read...

5.5CVSS5.9AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/13 12:0 a.m.4 views

PT-2026-32527

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19 ImageMagick versions prior to 6.9.13-44 Description The -sample operation contains an out-of-bounds read, which occurs when a specific offset is configured via the sample:offset define. Recommendations...

7.1CVSS5.7AI score0.00194EPSS
SaveExploits0References126
CNNVD
CNNVD
added 2026/04/13 12:0 a.m.8 views

ImageMagick 缓冲区错误漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-19 and 6.9.13-44 contained a buffer error vulnerability. This vulnerability stemmed from the sample...

7.1CVSS6AI score0.00194EPSS
SaveExploits0References5
Circl
Circl
added 2026/04/02 4:0 p.m.11 views

CVE-2026-28767

creationtimestamp| type| source ---|---|--- 2026-04-02 16:00:04+00:00| seen| https://t.me/GithubRedTeam/78481 2026-04-02 19:00:12+00:00| published-proof-of-concept| Telegram/gRG1YNPgKTOZJrmhE4GIDK8JXBCMivinEoGiTEUHs5vhIFA 2026-04-02 21:00:04+00:00| published-proof-of-concept|...

6.9CVSS4.9AI score0.00377EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/03/28 11:9 p.m.8 views

CVE-2026-33980

Azure Data Explorer MCP Server is a Model Context Protocol MCP server that enables AI assistants to execute KQL queries and explore Azure Data Explorer ADX/Kusto databases through standardized interfaces. Versions up to and including 0.1.1 contain KQL Kusto Query Language injection vulnerabilitie...

8.3CVSS6.1AI score0.00396EPSS
SaveExploits3References1
Snyk
Snyk
added 2026/03/27 11:24 p.m.7 views

Improper Neutralization of Special Elements in Data Query Logic

Overview adx-mcp-server is a MCP server for Azure Data Explorer integration Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via the gettableschema, sampletabledata, and gettabledetails handlers when the tablename parameter is...

8.7CVSS6.1AI score0.00396EPSS
SaveExploits3References2
NVD
NVD
added 2026/03/27 10:16 p.m.11 views

CVE-2026-33980

Azure Data Explorer MCP Server is a Model Context Protocol MCP server that enables AI assistants to execute KQL queries and explore Azure Data Explorer ADX/Kusto databases through standardized interfaces. Versions up to and including 0.1.1 contain KQL Kusto Query Language injection vulnerabilitie...

8.3CVSS0.00396EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2026/03/27 9:32 p.m.31 views

CVE-2026-33980 Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries

Azure Data Explorer MCP Server is a Model Context Protocol MCP server that enables AI assistants to execute KQL queries and explore Azure Data Explorer ADX/Kusto databases through standardized interfaces. Versions up to and including 0.1.1 contain KQL Kusto Query Language injection vulnerabilitie...

8.3CVSS0.00396EPSS
SaveExploits3References2
CVE
CVE
added 2026/03/27 9:32 p.m.51 views

CVE-2026-33980

Azure Data Explorer MCP Server

8.3CVSS6.1AI score0.00396EPSS
SaveExploits3References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/27 9:32 p.m.16 views

CVE-2026-33980 Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries

Azure Data Explorer MCP Server is a Model Context Protocol MCP server that enables AI assistants to execute KQL queries and explore Azure Data Explorer ADX/Kusto databases through standardized interfaces. Versions up to and including 0.1.1 contain KQL Kusto Query Language injection vulnerabilitie...

8.3CVSS6.1AI score0.00396EPSS
SaveExploits3References2
OSV
OSV
added 2026/03/27 7:8 p.m.6 views

GHSA-VPHC-468G-8RFP Azure Data Explorer MCP Server: KQL Injection in multiple tools allows MCP client to execute arbitrary Kusto queries

Summary adx-mcp-server ListDictstr, Any: client = getkustoclient query = f"tablename | getschema" ListDictstr, Any: client = getkustoclient query = f"tablename | sample samplesize" ListDictstr, Any: client = getkustoclient query = f".show table tablename details" -- KQL injection resultset =...

8.3CVSS6.1AI score0.00396EPSS
SaveExploits3References4
vulnersOsv
vulnersOsv
added 2026/03/23 6:42 p.m.7 views

xyz.erupt:erupt-sample (>=1.13.2 <=1.13.3) potentially affected by CVE-2026-4593 via xyz.erupt:erupt-ai (>=1.13.2 <=1.13.3)

xyz.erupt:erupt-ai MAVEN version =1.13.2, =1.13.2, =1.13.3 Source cves: CVE-2026-4593 Source advisory: SNYK:JAVA-XYZERUPT-15812217...

6.5CVSS6.5AI score0.00192EPSS
SaveExploits0
OSV
OSV
added 2026/03/18 6:4 a.m.10 views

RLSA-2023:7754 Moderate: pixman security update

Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fixes: pixman: Integer overflow in pixmansamplefloory leading to heap out-of-bounds write CVE-2022-44638 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

7CVSS5.8AI score0.0144EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.10 views

libheif 缓冲区错误漏洞

LibHEIF is a open-source decoder and encoder for the ISO/IEC 23008-12:2017 HEIF file format developed by Struktur. Versions of Struktur that include LibHEIF 1.21.2 and earlier contain a buffer error vulnerability. This vulnerability stems from incorrect operations in the Track::load function with...

4.8CVSS6AI score0.00117EPSS
SaveExploits0References7
GithubExploit
GithubExploit
added 2026/03/10 6:33 p.m.162 views

sql-injection-corpus

SQL Injection Corpus - User Guide Overview This corpus con...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/03/09 3:52 p.m.154 views

New-Shellcode-Injection-Exploit

Shellcode Injection Exploit Author Created by 0x5da...

6.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/03/06 1:34 a.m.6 views

CVE-2025-29165

An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component...

9.8CVSS6AI score0.00633EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/06 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-27622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In...

8.4CVSS7.2AI score0.00201EPSS
SaveExploits2References3
EUVD
EUVD
added 2026/03/05 9:30 p.m.8 views

EUVD-2025-208324

An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component...

5.9AI score0.00633EPSS
SaveExploits0References4
NVD
NVD
added 2026/03/05 8:16 p.m.8 views

CVE-2025-29165

An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component...

9.8CVSS0.00633EPSS
SaveExploits0References4
Rows per page
Query Builder