Lucene search
+L

7080 matches found

Vulnrichment
Vulnrichment
added 2026/08/19 1:39 p.m.10 views

CVE-2026-75114 Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo < 4.1.64

Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate in Zoo 4.1.64 - The referer request parameter is passed straight to setRedirect with no validation...

5.1CVSS5.2AI score0.00295EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 1:21 p.m.12 views

EUVD-2026-62398

nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker-controlled length fields deserialized from a session file, a crafted session file can cause nnn to write data beyond the bounds of fixed-size global buffers when loaded with the -s option. An attacker who...

2.4CVSS5.5AI score0.00115EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 6:00 a.m.18 views

EUVD-2026-62276

The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before establishing a session for the account associated with the referenced order, allowing unauthenticated attackers to log in as any registered user, including an administrator...

9.8CVSS5.4AI score0.00341EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/19 2:08 a.m.25 views

kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM networking component. A local attacker, by acting as a malicious signaling daemon, could send a specially crafted message containing an unvalidated pointer. This unvalidated pointer would be directly used by the kernel, leading...

5.5CVSS5.7AI score0.00131EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/19 1:28 a.m.13 views

kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM networking component. A local attacker, by acting as a malicious signaling daemon, could send a specially crafted message containing an unvalidated pointer. This unvalidated pointer would be directly used by the kernel, leading...

5.5CVSS5AI score0.00131EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.20 views

PT-2026-78420

Name of the Vulnerable Software and Affected Versions Stigmem versions prior to 0.9.0a11 Description Authenticated users can perform blind Server-Side Request Forgery SSRF attacks by specifying internal loopback or private network destinations in the delivery address parameter during the creation...

6.3CVSS5.3AI score0.00265EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/18 5:17 p.m.10 views

CVE-2026-66783

A flaw was found in the submariner-operator component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource CR, to specify an unvalidated image path. This lack of validation...

4.4CVSS0.00277EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/18 5:06 p.m.18 views

EUVD-2026-61067

A flaw was found in the submariner-operator component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource CR, to specify an unvalidated image path. This lack of validation...

8.2CVSS6AI score0.00277EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/08/18 4:32 p.m.13 views

RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading

The JSON-RPC tools in com.rabbitmq.tools.jsonrpc perform Class.forNamejavaReturnType with initialize=true on class names received from untrusted AMQP messages, without any validation or allowlist. Vulnerable code ProcedureDescription.java:101-127: When a JsonRpcClient connects, it calls...

7.5CVSS5.6AI score0.00317EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/08/18 4:32 p.m.11 views

GHSA-6G32-PXV4-2WFJ RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading

The JSON-RPC tools in com.rabbitmq.tools.jsonrpc perform Class.forNamejavaReturnType with initialize=true on class names received from untrusted AMQP messages, without any validation or allowlist. Vulnerable code ProcedureDescription.java:101-127: When a JsonRpcClient connects, it calls...

7.5CVSS5.6AI score0.00317EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/18 4:27 p.m.121 views

CVE-2026-63337

The RabbitMQ Java client (pre-5.33.0) passes an untrusted javaReturnType from system.describe through Class.forName with initialization enabled, allowing an attacker controlling broker responses to trigger arbitrary class static initializers in the victim JVM, affecting confidentiality, integrity...

7.5CVSS5.3AI score0.00317EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/18 3:51 p.m.24 views

CVE-2026-47245

In MyBB versions prior to 1.8.40, the usercp.php?action=do_editlists delete handler performs a reciprocal buddy-list update that searches for the target UID instead of the acting user's UID and uses the unchecked array_search() return value as an array key. When array_search() returns false, it i...

4.3CVSS5.4AI score0.00269EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/18 3:51 p.m.16 views

CVE-2026-47245 MyBB: Buddy list corruption

MyBB is free and open source forum software. Prior to 1.8.40, the User CP Buddy/Ignore List component does not validate reciprocal buddy-list updates correctly. The usercp.php?action=doeditlists delete handler removes the selected entry from the acting user's list and then updates...

4.3CVSS5.5AI score
SaveExploits0References6
CVE
CVE
added 2026/08/18 3:22 p.m.30 views

CVE-2026-75912

CodeWhale's git_blame tool passes an unvalidated rev parameter directly to git, allowing attackers to inject options like --contents=/path/to/file to exfiltrate sensitive files (SSH keys, credentials) via tool output. CVSS 3.1 score 7.4 (High). Fixed in CodeWhale 0.8.64. No in-the-wild exploitati...

8.3CVSS5.5AI score0.00408EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/18 3:21 p.m.27 views

CVE-2026-75859 CodeWhale before 0.8.64 Arbitrary File Read via instructions

CodeWhale versions before 0.8.64 fail to validate file paths in the project config instructions field, allowing attackers to read arbitrary files on the victim's system. A malicious .codewhale/config.toml file in a cloned repository can specify paths outside the workspace that are read and inject...

8.7CVSS0.00414EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/18 3:03 p.m.27 views

Security Bulletin: Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference ( CVE-2026-18544 )

Summary IBM Portieris skips image policy enforcement when a pod contains a fabricated ownerReference whose Kind matches one of the supported controller types. This allows bypassing of image security policies in a namespace when Portieris is the enforcing Kubernetes admission controller...

8.1CVSS5.4AI score0.00327EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/08/18 12:19 p.m.8 views

CVE-2026-75830

grav-plugin-api getgrav/grav-plugin-api versions = 1.0.0-beta.10 and = 1.0.14 contain a path traversal vulnerability in the PagesController::batchCopy method. An incomplete fix for GHSA-qjq4-jp55-4mx2 left the user-controlled 'suffix' parameter via POST /api/v1/pages/batch unvalidated. An...

7.1CVSS0.00338EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/18 11:19 a.m.26 views

CVE-2026-75830 grav-plugin-api before 1.0.15 Path Traversal via batchCopy

grav-plugin-api getgrav/grav-plugin-api versions = 1.0.0-beta.10 and = 1.0.14 contain a path traversal vulnerability in the PagesController::batchCopy method. An incomplete fix for GHSA-qjq4-jp55-4mx2 left the user-controlled 'suffix' parameter via POST /api/v1/pages/batch unvalidated. An...

7.1CVSS0.00338EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/18 8:38 a.m.8 views

CVE-2026-72188

A flaw was found in the Linux kernel's NTFS filesystem driver. A remote attacker could craft a malicious NTFS image that, when processed, causes the ntfslookupinodebyname function to return an unvalidated error-marked MFT Master File Table reference. This can lead to callers consuming a bogus err...

9.1CVSS5.4AI score0.00467EPSS
SaveExploits0References4
Anthropic
Anthropic
added 2026/08/18 12:36 a.m.25 views

ANT-2026-MEXHXGNE · supabase/supabase · SQL Injection

sql-injection high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-MEXHXGNE: Link-driven SQL injection via schema URL parameter Supabase Studio reads the ?schema= URL...

6AI score
SaveExploits0References1
Rows per page
Query Builder