90987 matches found
CVE-2026-16646: Missing Authentication for Critical Function
Vulnerability in Drupal PanKM. This issue affects PanKM versions:...
CVE-2026-77127: Authorization Bypass Through User-Controlled Key
The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses the current databa...
CVE-2026-16641: Improper Input Validation
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions:...
CVE-2026-75421: Stack-based Buffer Overflow
aria2 =1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine function...
CVE-2026-16642: Improper Input Validation
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions:...
CVE-2026-15088: Improper Input Validation
Vulnerability in Drupal Development Environment. This issue affects Development Environment versions:...
CVE-2026-21758: Exposure of Sensitive Information to an Unauthorized Actor
HCL Hive is affected by an information disclosure vulnerability, which could lead to an attacker gathering sensitive information about the host environment...
bbot v3.0.2
BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...
CVE-2025-53770-Scanner
🛡️ Scanner de Vulnerabilidade CVE-2025-53770 no SharePoint Uma ferramenta baseada em Python para detectar instâncias vulneráveis do Microsoft SharePoint afetadas por CVE-2025-53770 , uma vulnerabilidade de desserialização insegura acionada através do endpoint ToolPane.aspx. O scanner envia um...
agent-bom v0.102.0
Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. 15 package ecosystems · 16 compliance surfaces · 77 MCP tools · no account required Quick start · Live demo · Docs What it is agent-bom scans repositories, images, and cloud accounts, then correlates what i...
CVE-2026-6826
creationtimestamp| type| source ---|---|--- 2026-08-24 06:44:22+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/concretecmsfileusagedisclosure.rb 2026-09-08 06:47:30+00:00| seen|...
CVE-2026-28167: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Download in Super Forms = 6.3.315 versions...
CVE-2026-78314: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-75464: Files or Directories Accessible to External Parties
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via importlink...
CVE-2026-78317: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-28151: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Tonda 2.6 versions...
CVE-2026-66599: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...
CVE-2026-78266: Missing Authorization
Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...