91115 matches found
CVE-2026-28167: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Super Forms allows Path Traversal. This issue affects Super Forms: from n/a through 6.3.316...
CVE-2026-78277: Server-Side Request Forgery (SSRF)
Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...
FreeBSD : traefik -- Multiple vulnerabilities (b22fee3d-9f14-11f1-b948-5404a68ad561)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b22fee3d-9f14-11f1-b948-5404a68ad561 advisory. The traefik project releases a new version addressing multiple vulnerabilities: Tenable has extracted t...
CVE-2026-78259: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...
CVE-2026-8630: Improper Neutralization of Input During Web Page Generation
justhtml before 1.12.0 versions = 1.11.0 contains a mutation cross-site scripting mXSS vulnerability in the serialization of raw-text elements such as...
CVE-2026-78136: Improper Neutralization of Directives in Dynamically Evaluated Code
chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in cleantmode in drivers/kenwooditm.py...
CVE-2026-74720: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...
CVE-2026-76606: Improper Limitation of a Pathname to a Restricted Directory
Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik 4.7.2...
Livewire2025CVE
Livewire2025CVE Scanner Livewire CVE-2025-54068 Scanner automatizado de vulnerabilidades para detectar a CVE-2025-54068 em aplicações Laravel que usam Livewire v3.0.0-beta.1 até v3.6.3. Visão Geral Esta ferramenta escaneia uma lista de sites em busca de indicadores da vulnerabilidade crítica de...
retire.js v5.5.0
Retire.js What you require you must also retire There is a vast ecosystem of JavaScript libraries available for both web and Node.js applications. While these libraries significantly accelerate development, they also require ongoing maintenance to ensure security vulnerabilities are addressed...
The Vulners team has released nmap-vulners 2.0
The Vulners team has releasednmap-vulners 2.0. This plugin an NSE script turns the popular Nmap port scanner into a black-box vulnerability scanner. Simply run $ nmap -sV --script vulners to get a prioritized report on vulnerabilities and exploits. And all of this is available for free with no...
Sitadel v1.5.1
Sitadel - Web Application Security Scanner root@kitploit: | || || | / | | | | | | | | | | || | | | \ | | |/ | | | | || | | | |/ | | | | | | /|| ||\ Sitadel is basically an update for WAScan making it compatible for python = 3.11 It allows more flexibility for you to write new modules and...
CVE-2026-31880: Improper Neutralization of Input During Web Page Generation
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting XSS vulnerability in the universal search. This issue has been fixed in version 3.2.3...
CVE-2026-45202: Double Free
Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...
CVE-2026-45201: Improper Validation of Specified Quantity in Input
Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...
CVE-2026-16520: Improper Input Validation
Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V4.0: from 4.0.0 before 4.0.175Revisio...
CVE-2026-59296: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Using untrusted, non-normalized input as-is for metrics data such as metric names, tag keys, or tag values is a dangerous antipattern that general-purpose instrumentation should never perform. Micrometer 1.17.0 Micrometer 1.16.0 - 1.16.6 Micrometer 1.15.0 - 1.15.12 Micrometer 1.14.0 - 1.14.16...
DockSec v2026.8.19
!CREATEDhttps://img.shields.io/badge/created-feb,%202025-blue?style=for-the-b...
