Lucene search
+L

169192 matches found

GithubExploit
GithubExploit
added 2026/07/29 7:1 p.m.53 views

claude-pentest

claude-pentest A local pentesting toolkit built for Claude Co...

5.9AI score
SaveExploits0
CVE
CVE
added 2026/07/29 7:0 p.m.81 views

CVE-2026-12436

GitLab CE/EE is affected by CVE-2026-12436 in versions 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1. The issue arises from improper validation of user-supplied attributes when processing pipeline schedule inputs, potentially allowing an authenticated user to modify another user’...

8.4CVSS5.9AI score0.0031EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/07/29 6:48 p.m.42 views

CVE-2026-67428

The CVE-2026-67428 entry concerns Flyto2 Core, an automation/AI-agent workflow kernel. Before version 2.26.7, multiple HTTP-emitting modules (including http/requests.py, core.api.http_get, core.api.http_post, graphql.query/mutation, monitor.http_check, communication.slack_send, notification.disco...

8.5CVSS6AI score0.00337EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/29 6:48 p.m.5 views

CVE-2026-67428 Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)

Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, HTTP-emitting modules including src/core/modules/thirdparty/developer/http/requests.py, core.api.httpget, core.api.httppost, graphql.query, graphql.mutation, monitor.httpcheck, communication.slacksend,...

8.5CVSS6AI score
SaveExploits0References5
NVD
NVD
added 2026/07/29 6:16 p.m.6 views

CVE-2026-8497

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate...

7.4CVSS0.00082EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/29 6:16 p.m.8 views

CVE-2026-40272

Improper Input Validation in the decode function of the traceparser library could allow an attacker with a corrupted kernel trace event log .kev file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets...

7CVSS0.00113EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/07/29 6:4 p.m.8 views

jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the...

8.1CVSS5.9AI score0.00712EPSS
SaveExploits0References10
CVE
CVE
added 2026/07/29 6:2 p.m.126 views

CVE-2026-59898

Technical details for CVE-2026-59898 are not publicly available in the provided documents. Monitor for updates.

7.5CVSS5.8AI score0.00249EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/07/29 6:2 p.m.66 views

CVE-2026-59898 Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 or V08 handshaker by sending Sec-WebSocket-Version: 7 and omitting Connection: Upgrade / Upgrade: websocket headers,...

6.3CVSS0.00249EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/29 5:58 p.m.28 views

CVE-2026-40272

CVE-2026-40272 involves an improper input validation in the decode() function of the traceparser library. The issue affects processes that use libtraceparser on QNX hosts/targets and can be triggered by a corrupted kernel trace event log (.kev) file. The underlying consequence is the potential ex...

7CVSS6.2AI score0.00113EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/29 5:37 p.m.71 views

CVE-2026-59919

Netty CVE-2026-59919 affects the HAProxy encoder (HAProxyMessageEncoder) in Netty versions prior to 4.1.136.Final and 4.2.16.Final. The encoder writes AF_UNIX source/destination addresses into the HAProxy V1 text protocol without validating for CRLF, allowing an attacker who controls an AF_UNIX a...

5.5CVSS6.1AI score0.00113EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2026/07/29 5:37 p.m.5 views

CVE-2026-18236 Google-ADK Continuation Forgery

A vulnerability in the Agent Development Kit ADK allows for continuation forgery in tool confirmations. An attacker who is able to manipulate or inject events into the session history can execute unauthorized tools by forging a tool confirmation response. This is possible because the framework di...

10CVSS6AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/29 5:24 p.m.8 views

CVE-2026-8497

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate...

5.9AI score0.00082EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/29 5:24 p.m.25 views

CVE-2026-8497

CVE-2026-8497 describes an issue in Devolutions Password Manager (versions up to 2026.2.1.0) where Devolutions Server connection handling performs improper certificate validation on Android, iOS, and macOS. This allows an adjacent-network attacker to intercept and modify sensitive information thr...

7.4CVSS5.9AI score0.00082EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/29 5:24 p.m.9 views

EUVD-2026-50422

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate...

7.4CVSS5.9AI score0.00082EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/29 4:34 p.m.20 views

CVE-2026-18257

In CVE-2026-18257, the issue affects the CycloneCrypto cryptographic wrapper used by S2OPC. The root cause is an improper validity period check for the root issuer certificate, which can lead to certificates issued by that root being treated as trusted. The cross-document details confirm the vuln...

5.6CVSS5.8AI score0.001EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/29 4:17 p.m.14 views

CVE-2026-54078

veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity XXE vulnerability in validation-model/src/main/java/org/verapdf/gf/model/tools/DictionaryKeysHelper.java in...

8.7CVSS0.0032EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/29 4:17 p.m.10 views

CVE-2026-54082

veraPDF validation model is an implementation of the veraPDF validation model. From 1.25.73 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity vulnerability in PDFAValidator.validate... and GFPDAcroForm.getdynamicRender, where default DocumentBuilderFactory parsing of...

6.5CVSS0.0023EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/29 4:17 p.m.11 views

CVE-2026-54079

veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair. From 1.17.35 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity XXE vulnerability in validation-model/src/main/java/org/verapdf/gf/model/impl/pd/GFPDAcroForm.java in the...

8.7CVSS0.0032EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/29 3:49 p.m.7 views

CVE-2026-66038

A flaw was found in FFmpeg, specifically within the LCL/ZLIB video decoder. A remote attacker could exploit this vulnerability by providing a specially crafted zlib stream that decompresses to a smaller size than expected. This can lead to the exposure of uninitialized heap memory, including...

7.1CVSS5.8AI score0.00245EPSS
SaveExploits0References6
Rows per page
Query Builder