Lucene search
+L

32900 matches found

Wolfi
Wolfi
added 2026/08/14 8:24 a.m.15 views

GO-2026-4471 vulnerabilities

Vulnerabilities for packages: gatus...

5.3AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:24 a.m.11 views

GO-2026-5848 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

5.3AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 2:16 a.m.11 views

GHSA-JGRX-MGXX-JF9V vulnerabilities

Vulnerabilities for packages: arangodb...

5.2AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/08/14 12:52 a.m.9 views

SUSE CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

7.8CVSS5.8AI score0.0014EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/14 12:32 a.m.10 views

EUVD-2026-58478

AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...

9.8CVSS6.6AI score0.00838EPSS
SaveExploits0References5
Circl
Circl
added 2026/08/13 10:43 p.m.14 views

GHSA-MXCG-P696-RM94

creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...

4.9AI score
SaveExploits0References1
NVD
NVD
added 2026/08/13 10:17 p.m.12 views

CVE-2026-73667

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled workflow parameters into shell program text executed through sh -...

8.8CVSS0.00615EPSS
SaveExploits0References12
NVD
NVD
added 2026/08/13 10:17 p.m.10 views

CVE-2026-73660

FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argument, and used to build filenames insid...

7.5CVSS0.00444EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/13 10:17 p.m.11 views

CVE-2026-72776

AgenticSeek commit fc242c7 contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send...

9.8CVSS0.00838EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/13 9:43 p.m.31 views

CVE-2026-73667 OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled workflow parameters into shell program text executed through sh -...

8.8CVSS0.00615EPSS
SaveExploits0References12
OSV
OSV
added 2026/08/13 9:43 p.m.3 views

CVE-2026-73667 OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled workflow parameters into shell program text executed through sh -...

8.8CVSS5.7AI score
SaveExploits0References14
EUVD
EUVD
added 2026/08/13 9:23 p.m.16 views

EUVD-2026-58483

FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argument, and used to build filenames insid...

7.5CVSS5.6AI score0.00444EPSS
SaveExploits0References3
Circl
Circl
added 2026/08/13 8:00 p.m.13 views

CVE-2026-73650

creationtimestamp| type| source ---|---|--- 2026-08-13 20:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msygo65aqv2u 2026-08-13 20:35:07+00:00| published-proof-of-concept| https://github.com/svg/svgo/security/advisories/GHSA-2p49-hgcm-8545...

8.2CVSS4.9AI score0.00242EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/13 6:18 p.m.9 views

CVE-2026-67614

CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSocket on port 8888. Attackers can craft a forged JWT signed...

9.8CVSS0.00552EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/13 5:58 p.m.5 views

SUSE-SU-2026:3611-1 Security update for dracut

This update for dracut fixes the following issue: Update to version 055+suse.404.gc96044c. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in die bsc1274432. Other updates and bugfixes: - Fixbase: sanitize message...

7.5CVSS5.9AI score0.00292EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/13 5:16 p.m.18 views

Malicious code in date-fmt-helper-xz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b384650ec0fabdd01a7dfc513cccd25156611a04c17ba0c435b950ddb9215777 date-fmt-helper-xz ships a postinstall.js that runs automatically on npm install. The script opens a TCP connection to the hardcoded remote host...

5.4AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/13 5:15 p.m.18 views

Malicious code in date-fmt-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae88f68f30ebd69a595537393ce95c4ce5e543b558572769fa2c608fa1b1b0d The package presents itself as a date-formatting utility, but its index.js is a trivial cover and a source comment explicitly labels the library as a...

5.4AI score
SaveExploits0References1
EUVD
EUVD
added 2026/08/13 5:08 p.m.9 views

EUVD-2026-58129

CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSocket on port 8888. Attackers can craft a forged JWT signed...

9.8CVSS5.4AI score0.00552EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/13 5:08 p.m.54 views

CVE-2026-67614

CVE-2026-67614 affects CyberPanel prior to 3.0.0. A hard-coded JWT secret in the WebTerminal FastAPI SSH service allows unauthenticated remote attackers to forge valid tokens and obtain an interactive root shell via WebSocket on port 8888. An attacker can craft a forged JWT signed with the hardco...

9.8CVSS5.4AI score0.00552EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/13 5:08 p.m.32 views

CVE-2026-67614 CyberPanel < 3.0.0 Hard-coded JWT Secret Authentication Bypass via WebTerminal

CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSocket on port 8888. Attackers can craft a forged JWT signed...

9.8CVSS0.00552EPSS
SaveExploits0References3
Rows per page
Query Builder