Lucene search
+L

2003 matches found

CVE
CVE
added 2026/09/11 7:37 a.m.18 views

CVE-2026-89179

WeenyGenius , a computer lab management system by Howyar Technologies , is affected by a Missing Support for Integrity Check vulnerability. An unauthenticated attacker on the same (adjacent) network can intercept a student's connection packet and replay it, forging the appearance that the student...

5.3CVSS0.00106EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/11 7:36 a.m.38 views

CVE-2026-89178 Howyar|WeenyGenius - Origin Validation Error

WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the...

8.8CVSS0.00229EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/11 7:36 a.m.15 views

CVE-2026-89178

WeenyGenius , a computer lab management system by Howyar Technologies , suffers from an Origin Validation Error that allows unauthenticated attackers on the same network to spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection wit...

8.8CVSS0.00229EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 7:34 a.m.10 views

EUVD-2026-76002

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values...

6.9CVSS0.00319EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/11 7:27 a.m.15 views

CVE-2026-89173

The Smart Video Intercom System developed by Kingdom Communication Associated is affected by a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses, allowing them to discover which accounts exist on...

6.9CVSS0.00261EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 7:27 a.m.12 views

EUVD-2026-76000

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

6.9CVSS0.00261EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/11 7:27 a.m.35 views

CVE-2026-89173 Kingdom Communication Associated|Smart Video Intercom System - Sensitive Data Exposure

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

6.9CVSS0.00261EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/11 6:37 a.m.6 views

EUVD-2026-75976

multiparty is a Node.js library for parsing multipart/form-data request bodies. In versions from 2.1.0 up to but not including 4.3.1, the parser does not bound the amount of memory used while accumulating the headers of a single multipart part. An unauthenticated attacker can send a single reques...

7.5CVSS0.00297EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/11 4:17 a.m.8 views

CVE-2026-18561

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to SQL Injection via the 'addontype' parameter in versions up to, and including, 2.0.16. This is due to insufficient escaping on the user-supplied parameter and the lack of sufficient preparation on the existing SQL query in...

7.5CVSS0.0033EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/09/11 3:39 a.m.7 views

EUVD-2026-75941

The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query Parameter Name in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS0.00211EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/11 3:39 a.m.44 views

CVE-2026-18562 HUSKY <= 1.4.3 - Reflected Cross-Site Scripting

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via SEO-friendly permalink filter URL segments in versions up to, and including, 1.4.3. This is due to insufficient input sanitization and output escaping in the wploadjs...

6.1CVSS0.00227EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/11 3:39 a.m.11 views

EUVD-2026-75935

The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible...

7.2CVSS0.00241EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/11 3:27 a.m.15 views

CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit

CVE-2026-56158 — .NET Framework Remote Code Execution RCE PoC Exploit Critical CVSS 9.8 — Deserialization of Untrusted Data CWE-502 in Microsoft .NET Framework & .NET Runtime Patched: July 14, 2026 | Attributed to: Positive Technologies PT-2026-60174 Table of Contents Overview Vulnerability Detai...

5.9AI score
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.11 views

PT-2026-90496

Concrete CMS 9.5.2 and below is vulnerable to Cross-Site Request Forgery CSRF in the Express "Clear Entries" function POST /index.php/dashboard/system/express/entities/delete entries because the controller records but does not enforce a failed CSRF token check, allowing the destructive operation ...

6.1CVSS0.00189EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.12 views

PT-2026-90003

Chamilo LMS before 1.11.42 and 3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious script payloads into survey answers by computing deterministic invitation codes and bypassing authorization checks in the survey submission endpoint...

6.1CVSS0.00268EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.11 views

PT-2026-89760

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL Query String in all versions up to, and including, 3.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

6.1CVSS0.00223EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/10 8:58 p.m.26 views

CVE-2026-85025

IBM Langflow OSS versions 1.0.0 through 1.11.5 are vulnerable to arbitrary code execution and chat session access/modification by an unauthenticated attacker through publicly shared MCP project endpoints . The root cause is improper enforcement of public-flow security restrictions and session iso...

9.8CVSS0.0043EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/10 8:57 p.m.22 views

CVE-2026-9667

IBM WebSphere Application Server 9.0 and 8.5 are vulnerable to server-side request forgery (SSRF) (CWE-918), allowing a remote, unauthenticated attacker to cause the server to send outbound requests to arbitrary endpoints. The impact is limited to low confidentiality per the CVSS 3.1 score of 5.3...

5.3CVSS0.00311EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 8:06 p.m.8 views

CVE-2026-31402

🛡️ CVE-2026-31402 – Desbordamiento de montículo en la caché de repetición de LOCK NFSv4 CVE-2026-31402: un bug de NFS en Linux oculto durante 23 años 📌 Descripción general CVE-2026-31402 es una vulnerabilidad de desbordamiento de montículo en la caché de repetición de LOCK de NFSv4.0 del kernel de...

9.8CVSS6.2AI score0.00949EPSS
SaveExploits0
EUVD
EUVD
added 2026/09/10 3:40 p.m.12 views

EUVD-2026-75568

Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

9.8CVSS0.03841EPSS
SaveExploits0References1
Rows per page
Query Builder