Lucene search
+L

91013 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•8 views

CVE-2026-75421: Stack-based Buffer Overflow

aria2 =1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine function...

4CVSS5.8AI score0.00157EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•9 views

CVE-2026-16642: Improper Input Validation

Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...

5.7CVSS5.7AI score0.00188EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•10 views

CVE-2026-15088: Improper Input Validation

Vulnerability in Drupal Development Environment. This issue affects Development Environment versions:...

5.7CVSS5.7AI score0.00188EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•6 views

CVE-2026-77139: Improper Limitation of a Pathname to a Restricted Directory

The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask module can supply a key containing path traversal sequences to create or delete .html files...

6CVSS5.9AI score0.00437EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•6 views

CVE-2026-16641: Improper Input Validation

Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...

9.8CVSS5.7AI score0.0029EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•6 views

CVE-2026-77131: Cleartext Transmission of Sensitive Information

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key...

5.3CVSS5.8AI score0.00244EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•6 views

CVE-2026-21758: Exposure of Sensitive Information to an Unauthorized Actor

HCL Hive is affected by an information disclosure vulnerability, which could lead to an attacker gathering sensitive information about the host environment...

3.7CVSS5.8AI score0.00171EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/08/24 5:49 p.m.•24 views

bbot v3.0.2

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...

5.8AI score
SaveExploits0References29
Kitploit
Kitploit
•added 2026/08/24 9:49 a.m.•16 views

CVE-2025-53770-Scanner

🛡️ Scanner de Vulnerabilidade CVE-2025-53770 no SharePoint Uma ferramenta baseada em Python para detectar instâncias vulneráveis do Microsoft SharePoint afetadas por CVE-2025-53770 , uma vulnerabilidade de desserialização insegura acionada através do endpoint ToolPane.aspx. O scanner envia um...

9.8CVSS8.4AI score0.99999EPSS
SaveExploits45
Kitploit
Kitploit
•added 2026/08/24 8:35 a.m.•18 views

agent-bom v0.102.0

Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. 15 package ecosystems · 16 compliance surfaces · 77 MCP tools · no account required Quick start · Live demo · Docs What it is agent-bom scans repositories, images, and cloud accounts, then correlates what i...

5.7AI score
SaveExploits0References30
Circl
Circl
•added 2026/08/24 6:44 a.m.•25 views

CVE-2026-6826

creationtimestamp| type| source ---|---|--- 2026-08-24 06:44:22+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/concretecmsfileusagedisclosure.rb 2026-09-08 06:47:30+00:00| seen|...

6.9CVSS5.8AI score0.01282EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•5 views

CVE-2026-78314: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

8.8CVSS6AI score0.00655EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•8 views

CVE-2026-75464: Files or Directories Accessible to External Parties

OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...

8.1CVSS6AI score0.0046EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•4 views

CVE-2026-78317: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

8.8CVSS6AI score0.00655EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•7 views

CVE-2026-28151: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

8.1CVSS5.7AI score0.00467EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•7 views

CVE-2026-66599: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...

7.1CVSS5.7AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•9 views

CVE-2026-78266: Missing Authorization

Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...

6.5CVSS5.7AI score0.00299EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•3 views

CVE-2026-78263: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•6 views

CVE-2026-32556: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•7 views

CVE-2026-78267: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in TranslatePress = 3.3.2 versions...

9.8CVSS5.7AI score0.00483EPSS
SaveExploits0References2
Rows per page
Query Builder