Lucene search
+L

6449 matches found

EUVD
EUVD
added 2026/04/28 6:09 p.m.13 views

EUVD-2026-26089

OpenClaw before 2026.3.28 contains an execution approval vulnerability in exec-approvals-allowlist.ts that allows allow-always persistence to trust wrapper carrier executables instead of invoked targets. Attackers can exploit positional carrier executable routing through dispatch wrappers to...

7.3CVSS5.5AI score0.00124EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2026/04/28 12:00 a.m.22 views

Medoid Prototype Alignment for Cross-Plant Unknown Attack Detection in Industrial Control Systems

Deploying an intrusion detector trained in one industrial plant to another remains difficult because Industrial Control System ICS traffic is highly site-dependent, labels are scarce, and unseen attacks often appear after deployment. To address this challenge, this paper introduces a medoid...

5.2AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/04/27 11:24 p.m.7 views

CVE-2026-41371 OpenClaw < 2026.3.28 - Privilege Escalation via chat.send Reset Command

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway callers to trigger admin-only session reset operations. Attackers can rotate target sessions, archive prior transcript state, and force new session IDs without requiring admin sco...

8.5CVSS5.3AI score0.00255EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/27 9:21 p.m.18 views

MAL-2026-3105 Malicious code in mypypipkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a94a9bbd6a292f754fedd6ae737eaf5259925cf382a610c9d63e9d210a3f3677 When running as a module, the package starts a VSCode tunnel and exfiltrates the connection link to the hardcoded target. This lets the attacker connect the...

5.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/27 9:21 p.m.22 views

Malicious code in mypypipkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a94a9bbd6a292f754fedd6ae737eaf5259925cf382a610c9d63e9d210a3f3677 When running as a module, the package starts a VSCode tunnel and exfiltrates the connection link to the hardcoded target. This lets the attacker connect the...

5.5AI score
SaveExploits0References1
EUVD
EUVD
added 2026/04/27 8:46 p.m.24 views

EUVD-2026-25922

If shutil.unpackarchive is given a ZIP archive with an absolute Windows path containing a drive C:\... then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability...

6CVSS5.2AI score0.00551EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/04/27 8:46 p.m.9 views

CVE-2026-3087

If shutil.unpackarchive is given a ZIP archive with an absolute Windows path containing a drive C:\... then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability...

6CVSS5.2AI score0.00551EPSS
SaveExploits1References7Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/27 8:46 p.m.13 views

CVE-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs

If shutil.unpackarchive is given a ZIP archive with an absolute Windows path containing a drive C:\... then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability...

6CVSS5.2AI score0.00551EPSS
SaveExploits1References13
Debian CVE
Debian CVE
added 2026/04/27 8:46 p.m.22 views

CVE-2026-3087

If shutil.unpackarchive is given a ZIP archive with an absolute Windows path containing a drive C:\... then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability...

7.5CVSS5.3AI score0.00551EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2026/04/27 10:34 a.m.16 views

kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsitdecsessionusagecount In iscsitdecsessionusagecount, the function calls complete while holding the sess-sessionusagelock. Similar to the connection usage count logic, the waiter...

8.8CVSS5.5AI score0.0025EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/04/27 10:34 a.m.25 views

kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()

A use-after-free flaw was found in the Linux kernel's iSCSI target subsystem. In the iscsitdecconnusagecount function, complete is called while still holding the conn-connusagelock spinlock. The waiting thread such as iscsitcloseconnection may wake up immediately and free the iscsitconn structure...

7.8CVSS5.5AI score0.00122EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2026/04/27 6:11 a.m.233 views

unicas_docker_exploit

Cyber-Range Didattico in Docker / Educational Docker Cyber-Ran...

10CVSS6.5AI score0.99999EPSS
SaveExploits146
Positive Technologies
Positive Technologies
added 2026/04/27 12:00 a.m.26 views

PT-2026-35528

Name of the Vulnerable Software and Affected Versions CPython affected versions not specified Description On Windows, the shutil.unpack archive function fails to properly check for absolute paths within ZIP archives. If an archive contains a path with a drive letter e.g., C:, files may be extract...

7.5CVSS5.4AI score0.00551EPSS
SaveExploits1References34
CNNVD
CNNVD
added 2026/04/27 12:00 a.m.19 views

CPython 路径遍历漏洞

CPython is a Python interpreter implemented in C language by the Python Foundation. CPython has a path traversal vulnerability. This vulnerability arises when processing ZIP archives that contain absolute Windows paths, potentially allowing the archive to be extracted outside of the target...

7.5CVSS5.8AI score0.00551EPSS
SaveExploits1References2
NVD
NVD
added 2026/04/26 10:17 p.m.18 views

CVE-2018-25280

Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a 6000-byte payload into the Scan Target field and trigger a denial of service condition when the Scan...

6.8CVSS0.00128EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/26 1:19 p.m.7 views

CVE-2018-25280

Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a 6000-byte payload into the Scan Target field and trigger a denial of service condition when the Scan...

6.8CVSS5.7AI score0.00128EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/26 1:19 p.m.10 views

CVE-2018-25280 Infiltrator Network Security Scanner 4.6 Denial of Service

Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a 6000-byte payload into the Scan Target field and trigger a denial of service condition when the Scan...

6.8CVSS5.7AI score0.00128EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/26 1:19 p.m.17 views

EUVD-2018-21800

Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a 6000-byte payload into the Scan Target field and trigger a denial of service condition when the Scan...

6.8CVSS5.7AI score0.00128EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/26 1:19 p.m.53 views

CVE-2018-25280 Infiltrator Network Security Scanner 4.6 Denial of Service

Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a 6000-byte payload into the Scan Target field and trigger a denial of service condition when the Scan...

6.8CVSS0.00128EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/04/26 5:54 a.m.142 views

Exploit for Missing Authentication for Critical Function in Coreweave Marimo

CVE-2026-39987 Lab Guide Pre-Auth Remote Code Execution v...

9.8CVSS8.4AI score0.99564EPSS
SaveExploits25
Rows per page
Query Builder