Lucene search
K

12546 matches found

GithubExploit
GithubExploit
added 2026/05/21 10:24 p.m.60 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

No d...

7.8CVSS7.3AI score0.94016EPSS
Exploits227
OSV
OSV
added 2026/05/21 7:28 p.m.29 views

GHSA-3R75-XC34-5F44 Crawlee for Python: SSRF via sitemap-derived URLs

Overview - Vulnerability type: Blind SSRF - Affected components: src/crawlee/utils/sitemap.py, src/crawlee/utils/robots.py, src/crawlee/requestloaders/sitemaprequestloader.py, and all built-in HTTP clients. - Trigger: an attacker-controlled sitemap or robots.txt containing a URL that points to an...

2.3CVSS6.4AI score0.00286EPSS
Exploits0References4
NVD
NVD
added 2026/05/21 10:16 a.m.9 views

CVE-2026-42396

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail...

6.5CVSS0.00474EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/21 9:25 a.m.9 views

EUVD-2026-31261

Insufficient Validation of Names During AXFR...

6.8CVSS5.8AI score0.00324EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/21 9:25 a.m.3 views

CVE-2026-42000

Insufficient Validation of Names During AXFR...

6.8CVSS5.8AI score0.00324EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2026/05/21 9:25 a.m.27 views

CVE-2026-42000

CVE-2026-42000 affects PowerDNS Authoritative server. The issue is "Insufficient Validation of Names During AXFR" in the AXFR process, caused by inadequate validation of transfer names, which is reported to enable a command-injection path per some sources and could contribute to denial of service...

8.6CVSS5.8AI score0.00324EPSS
Exploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2026/05/21 9:25 a.m.11 views

CVE-2026-42000

Insufficient Validation of Names During AXFR...

8.6CVSS5.8AI score0.00324EPSS
Exploits0
CVE
CVE
added 2026/05/21 9:25 a.m.20 views

CVE-2026-42396

Technical details for CVE-2026-42396 are not publicly available in the provided documents. Monitor for updates from Debian advisories and NVD for affected versions and fixes.

6.5CVSS5.8AI score0.00474EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/05/21 9:25 a.m.36 views

CVE-2026-42396 Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail...

4.9CVSS0.00474EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/21 9:25 a.m.5 views

CVE-2026-42396

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail...

4.9CVSS5.8AI score0.00474EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/05/21 9:25 a.m.9 views

EUVD-2026-31265

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail...

4.9CVSS5.8AI score0.00474EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/21 9:25 a.m.8 views

CVE-2026-42396 Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail...

4.9CVSS5.8AI score0.00474EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2026/05/21 9:25 a.m.12 views

CVE-2026-42396

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail...

6.5CVSS5.8AI score0.00474EPSS
Exploits0
GithubExploit
GithubExploit
added 2026/05/21 9:20 a.m.23 views

tenda-hg10-voip-other-set-stack-overflow

Tenda HG10 Stack-based Buffer Overflow Vulnerability Summa...

6.4AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/05/21 8:51 a.m.8 views

CVE-2026-44608

A flaw was found in Unbound. When operating in a multi-threaded configuration with specific Response Policy Zones RPZ using 'rpz-nsip' or 'rpz-nsdname' triggers, a locking inconsistency during an RPZ zone transfer XFR reload can occur. This timing issue may allow an adversary to trigger a heap...

8.2CVSS5.7AI score0.00265EPSS
Exploits0References4
Fedora
Fedora
added 2026/05/21 1:28 a.m.11 views

[SECURITY] Fedora 43 Update: proftpd-1.3.9a-2.fc43

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

8.1CVSS5.8AI score0.00455EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.7 views

PT-2026-42449

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail...

4.9CVSS5.8AI score0.00474EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.7 views

PT-2026-42446

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Insufficient validation of names occurs during AXFR Asynchronous Full Transfer, a mechanism used by DNS servers to replicate zone data from a primary server to a...

8.6CVSS5.8AI score0.00324EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/21 12:0 a.m.10 views

PowerDNS Authoritative 命令注入漏洞

PowerDNS Authoritative is a DNS server software developed by PowerDNS Corporation. PowerDNS Authoritative has a command injection vulnerability, which stems from insufficient name validation during the AXFR process...

8.6CVSS5.8AI score0.00324EPSS
Exploits0References1
OSV
OSV
added 2026/05/20 12:36 p.m.6 views

MAL-2026-4551 Malicious code in encrata-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98813f52fa8e9fc3c04bffd023445dbfed4a9b405d1e3f85511673f5e86dce7 package.json declares "postinstall": "node install.js", which runs at install time. install.js requires both childprocess and https, branches on...

5.8AI score
Exploits0References2
Rows per page
Query Builder