67367 matches found
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CopyFail-Scanner-CVE-2026-31431 CopyFail-Scanner es una herram...
CVE-2026-42439: Missing Authorization
OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes. Attackers can bypass configured browser SSRF policy protections by exploiting the /tabs/action endpoint to perform unauthorized tab navigation operation...
CVE-2026-43573: Missing Authorization
OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes. Attackers can bypass SSRF navigation guards to interact with or navigate to unauthorized targets without policy enforcement...
CVE-2026-40797: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saleswonder LLC WebinarIgnition allows Blind SQL Injection. This issue affects WebinarIgnition: from n/a through 4.08.253...
CVE-2026-38947: Improper Neutralization of Input During Web Page Generation
FluentCMS 1.2.3 is vulnerable to Cross Site Scripting XSS in TextHTML plugin...
CVE-2025-52206: Improper Neutralization of Input During Web Page Generation
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting XSS via the system status webpage...
CVE-2025-47401: Buffer Over-read
Transient DOS when processing target power rate tables during channel configuration...
CVE-2026-25266: Exposed Dangerous Method or Function
Memory corruption while processing IOCTL command when device is in power-save state...
CVE-2025-47405: Untrusted Pointer Dereference
Memory corruption when processing camera sensor input/output control codes with invalid output buffers...
CVE-2025-47404: Buffer Copy without Checking Size of Input
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified...
CVE-2026-43861: Improper Neutralization of Null Byte or NUL Character
mutt before 2.3.2 does not check for '\0' in urlpctdecode...
sshprank 1.7.0
sshprank is a fast SSH mass-scanner, login cracker, and banner grabber tool using the python-masscan and shodan modules...
CVE-2025-47403: Buffer Over-read
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming...
CVE-2026-6501: Improper Restriction of XML External Entity Reference
Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOpenDocument: 1.5...
CVE-2025-47408: Untrusted Pointer Dereference
Memory corruption when another driver calls an IOCTL with invalid input/output buffer...
CVE-2025-47406: Buffer Over-read
Information Disclosure while processing IOCTL handler callbacks without verifying buffer size...
CVE-2026-43616: Relative Path Traversal
Detect-It-Easy prior to 3.21 contains a path traversal vulnerability that allows attackers to write arbitrary files to the filesystem by crafting malicious archive entries with relative traversal sequences or absolute paths. Attackers can exploit insufficient path normalization during archive...
CVE-2026-42075: Improper Limitation of a Pathname to a Restricted Directory
Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download fetch command allows attackers to write files to arbitrary locations on the filesystem. The --out= flag accepts user-provided paths without validation, enabli...