Lucene search
+L

94931 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/02 12:00 a.m.•11 views

CVE-2026-93029: Improper Neutralization of Input During Web Page Generation

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface...

9CVSS8.5AI score0.0052EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•14 views

PT-2026-104095

Name of the Vulnerable Software and Affected Versions WHM affected versions not specified Description A stored Cross-Site Scripting XSS issue exists in the Manage SSL Hosts interface. This flaw allows an attacker with low privileges to execute arbitrary code, potentially impacting confidentiality...

9CVSS8.2AI score0.0052EPSS
SaveExploits0References10
NVD
NVD
•added 2026/10/01 8:17 p.m.•15 views

CVE-2026-102671

The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default...

6.9CVSS0.00129EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/01 7:43 p.m.•6 views

CVE-2026-102671

The Joyland AI app is vulnerable because its invisible advertisement WebView accepts invalid SSL certificates by default. This flaw falls under CWE-295 (Improper Certificate Validation), potentially allowing for man-in-the-middle attacks within that specific WebView component. No specific version...

6.9CVSS5.8AI score0.00129EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/01 7:43 p.m.•41 views

CVE-2026-102671 Joyland AI WebView accepts invalid SSL certificates

The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default...

6.9CVSS0.00129EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/01 7:43 p.m.•7 views

CVE-2026-102671 Joyland AI WebView accepts invalid SSL certificates

The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default...

6.9CVSS5.8AI score0.00129EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/01 7:43 p.m.•14 views

EUVD-2026-91030

The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default...

6.9CVSS5.8AI score0.00129EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/01 5:17 a.m.•22 views

CVE-2026-76144

An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is not an official patch...

1.8CVSS0.00103EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/01 5:17 a.m.•29 views

CVE-2026-76143

A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter...

7.3CVSS0.00311EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/01 5:17 a.m.•42 views

CVE-2026-76145

An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration...

7.5CVSS0.00229EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/01 5:17 a.m.•21 views

CVE-2026-76146

An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely...

8.4CVSS0.01933EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/01 4:53 a.m.•39 views

CVE-2026-76146 Genians, Inc Genian SSL PNS OS Command Injection

An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely...

8.4CVSS0.01933EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/01 4:53 a.m.•15 views

EUVD-2026-90488

An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely...

8.4CVSS6.6AI score0.01933EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/01 4:53 a.m.•13 views

CVE-2026-76146 Genians, Inc Genian SSL PNS OS Command Injection

An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely...

8.4CVSS6.6AI score0.01933EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 4:53 a.m.•20 views

CVE-2026-76146

Genian SSL PNS is subject to an OS command injection vulnerability. An attacker who possesses only the client access ID , without requiring a password, can execute arbitrary commands remotely. No specific remediation details or exploit links were provided in the documentation.

8.4CVSS6.6AI score0.01933EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/01 4:53 a.m.•40 views

CVE-2026-76145 Genians, Inc Genian SSL PNS Improper Privilege Management

An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration...

7.5CVSS0.00229EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/01 4:53 a.m.•10 views

CVE-2026-76145 Genians, Inc Genian SSL PNS Improper Privilege Management

An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration...

7.5CVSS5.9AI score0.00229EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/01 4:53 a.m.•17 views

EUVD-2026-90487

An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipulating the permission column during CSV bulk user registration...

7.5CVSS5.9AI score0.00229EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 4:53 a.m.•29 views

CVE-2026-76145

An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges . The root cause is the ability to manipulate the permission column during the CSV bulk user registration process, which can also be used to force the creation of an O...

7.5CVSS5.9AI score0.00229EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 4:53 a.m.•18 views

CVE-2026-76144

The Genian SSL PNS software is susceptible to an unrestricted file upload vulnerability. This issue stems from insufficient file extension and integrity verification , which enables an attacker to upload dangerous files to the system. No specific exploit information or remediation details are pro...

1.8CVSS5.8AI score0.00103EPSS
SaveExploits0References1
Rows per page
Query Builder