Lucene search
+L

1798 matches found

Kitploit
Kitploit
added 2026/09/02 11:40 a.m.5 views

CVE-2026-21962-o

CVE-2026-21962 ¡Es mi primer CVE con CVSS 10.0! 👍✅💯㊗️🀄️🈵 Resumen Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso a la red a través de HTTP comprometa Oracle HTTP Server y el complemento de proxy de Oracle WebLogic Server. IMPORTANTE: Mensaje del...

10CVSS7.3AI score0.4202EPSS
SaveExploits6
EUVD
EUVD
added 2026/09/02 11:37 a.m.6 views

EUVD-2026-69938

Unauthenticated Cross Site Request Forgery CSRF in Mang Board WP = 2.3.8 versions...

8.8CVSS5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 7:35 a.m.7 views

Ashwesker-CVE-2026-21962

😈 CVE-2026-21962 — 严重安全漏洞 😈 🚨 严重等级 CVSS 评分: 10.0 / 10(严重) 发布时间: 2026 年 1 月 20 日 风险等级: 🔥 最高 — 建议立即采取行动 🧠 这是什么? 一个影响以下组件的严重漏洞 : Oracle HTTP Server Oracle WebLogic Server 代理插件 (适用于 Apache 和 IIS) 该漏洞允许未经身份验证的远程攻击者 通过 HTTP 入侵受影响的服务器,无需登录凭据。 🎯 攻击者可以做什么? 如果被利用,攻击者可以:...

10CVSS7.3AI score0.4202EPSS
SaveExploits6
EUVD
EUVD
added 2026/09/02 6:00 a.m.8 views

EUVD-2026-69843

The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting it in an HTML attribute on an administrative page, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against high privilege users such as admin...

7.5CVSS5.9AI score0.00172EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 6:00 a.m.8 views

CVE-2026-77792

The RegistrationMagic WordPress plugin before 6.0.9.9 contains an unauthenticated Stored Cross-Site Scripting vulnerability. A registration form field value (specifically the Rating field) is not escaped before being output in an HTML attribute on an administrative page, allowing an unauthenticat...

7.5CVSS5.9AI score0.00172EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 6:00 a.m.28 views

CVE-2026-12865 Photo Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged Parameters

The Photo Gallery by 10Web WordPress plugin before 1.8.44 does not escape two request parameters before reflecting them into input-attribute values on its admin pages one on the Shortcode page, one on the Galleries/Albums list page, so an unauthenticated attacker can craft a link that, when opene...

0.00185EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/02 5:17 a.m.4 views

CVE-2026-9055

The Booking for Appointments and Events Calendar – Amelia Premium plugin for WordPress is vulnerable to Privilege Escalation in versions 8.0 - 9.6.2. This is due to insufficient validation of the attacker-controlled 'type' parameter in the customer update endpoint, which allows customers to set...

9.8CVSS0.00291EPSS
SaveExploits0References2
CISA KEV Catalog
CISA KEV Catalog
added 2026/09/02 12:00 a.m.7 views

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations...

10CVSS7.5AI score0.00266EPSS
SaveIn wildExploits0
Kitploit
Kitploit
added 2026/09/01 11:30 p.m.2 views

weblogic2021

本项目涉及到的仅为安全研究和授权情况下使用,其使用人员有责任和义务遵守当地法律条规。 weblogic2021 CVE-2021-1994、CVE-2021-2047、CVE-2021-2064、CVE-2021-2108、CVE-2021-2075、CVE-2019-17195、CVE-2020-14756、CVE-2021-2109...

9.8CVSS6.7AI score0.74753EPSS
SaveExploits11
NVD
NVD
added 2026/09/01 9:18 p.m.4 views

CVE-2026-73763

A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility...

7.1CVSS0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 8:28 p.m.33 views

CVE-2026-73764 Authentication Bypass Vulnerabilities Leading to Unauthorized Modification and Service Disruption in AOS-CX

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable unauthorized modification of affected resources and limited disruption of...

7.1CVSS0.00211EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 8:28 p.m.8 views

EUVD-2026-69613

Multiple vulnerabilities exist in a daemon of AOS-CX that may allow for improper processing of malformed input. An unauthenticated remote attacker could exploit these vulnerabilities by sending specially crafted packets to the affected service. Successful exploitation could result in remote code...

9.8CVSS6.4AI score0.00532EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.6 views

CVE-2026-76658

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

10CVSS0.00435EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.6 views

CVE-2026-73731

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...

6.1CVSS0.00185EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 7:46 p.m.32 views

CVE-2026-73718 Unauthenticated Information Disclosure in Web Interface allows Sensitive Data Exposure in HPE Networking Fabric Composer

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL. Successful...

7.4CVSS0.00354EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 4:16 p.m.8 views

CVE-2026-49329

A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only '-'...

7.5CVSS0.00431EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/01 12:38 p.m.31 views

CVE-2026-84148

This vulnerability is an Insecure Direct Object Reference (IDOR) in the Manacle Technologies ERP System . The root cause is improper authentication and authorization controls in an API endpoint, allowing an unauthenticated remote attacker to manipulate a parameter and expose sensitive information...

9.2CVSS6AI score0.0039EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 11:31 a.m.13 views

EUVD-2026-69021

The Nokri - Job Board WordPress Theme for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 1.6.6. This is due to insufficient reset token validation in the nokriresetpassword function, which allows empty attacker-supplied reset tokens to...

9.8CVSS5.8AI score0.00326EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/01 9:28 a.m.9 views

EUVD-2026-68997

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'customorder' parameter in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

7.2CVSS6AI score0.00468EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2026/09/01 8:33 a.m.8 views

CVE-2026-40019

A flaw was found in Dovecot's ManageSieve login process. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted, truncated quoted argument. This action causes the process to enter an infinite loop, consuming excessive CPU resources. Repeated exploitation can lea...

7.5CVSS5.9AI score0.00316EPSS
SaveExploits0References4
Rows per page
Query Builder