Lucene search
+L

169867 matches found

Positive Technologies
Positive Technologies
added 2026/07/29 12:0 a.m.14 views

PT-2026-65790

Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor JCE 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files t...

5.8AI score0.00195EPSS
SaveExploits1References2
Redos
Redos
added 2026/07/29 12:0 a.m.8 views

ROS-20260729-73-0029

The vulnerability of the Go programming language’s crypto/x509 package is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to carry out “man-in-the-middle” attacks...

8.8CVSS7AI score0.0034EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:0 a.m.10 views

Fedora 43 : kronosnet (2026-56568b6fe8)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-56568b6fe8 advisory. CVE-2026-15811 LOW: encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicitbzero before...

6.5CVSS6AI score0.00269EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:0 a.m.9 views

SUSE SLED15 / SLES15 Security Update : apache-sshd (SUSE-SU-2026:3339-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3339-1 advisory. Update to upstream version 2.19.0. Security issues fixed: - CVE-2026-56452: remote users can use SCP to send...

7.5CVSS6.2AI score0.00593EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2026/07/29 12:0 a.m.7 views

Rockwell Automation CompactLogix Improper Validation of Integrity Check Value (CVE-2025-11694)

A security issue exists within the affected CompactLogix 5370 controllers due to missing validation of sequence numbers and source IP addresses in the CIP protocol. An attacker can abuse the exposed Connection IDs visible on the controller's web interface to send forged CIP packets, resulting in ...

8.7CVSS5.5AI score0.0017EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/28 11:17 p.m.48 views

CVE-2026-56822 Netty: TOCTOU in OcspServerCertificateValidator

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator forwards the SslHandshakeCompletionEvent before the asynchronous OCSP validation completes. This allows the client's downstream handlers to se...

7.4CVSS0.00112EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/28 10:25 p.m.8 views

EUVD-2026-50088

Pagy is agnostic pagination in plain Ruby. From 43.0.0 until 43.5.6, Pagy::I18n.locale= in gem/lib/pagy/modules/i18n/i18n.rb stored locale values verbatim and later used them as .yml path components, allowing untrusted params:locale values with absolute paths or ../ sequences to create a file...

6.9CVSS5.8AI score0.00368EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/28 10:25 p.m.12 views

Pagy I18n locale option is not validated before being used in a file path

Summary Pagy::I18n.locale= did not validate its argument before using it as a path component to load the matching dictionary file .yml. An application that assigns untrusted input to the locale — e.g. the common pattern Pagy::I18n.locale = params:locale — let that input influence which file Pagy...

6.9CVSS5.8AI score0.00368EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/07/28 10:25 p.m.4 views

GHSA-2XMW-F8J8-WFXC Pagy I18n locale option is not validated before being used in a file path

Summary Pagy::I18n.locale= did not validate its argument before using it as a path component to load the matching dictionary file .yml. An application that assigns untrusted input to the locale — e.g. the common pattern Pagy::I18n.locale = params:locale — let that input influence which file Pagy...

6.9CVSS5.8AI score0.00368EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/28 10:17 p.m.9 views

CVE-2026-54691

datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodelcodegenerator/http.py http.getbody accepts --url targets and redirect chain targets without host/IP validation, allowing server-side request forgery against loopback, private,...

8.2CVSS0.00209EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/07/28 10:8 p.m.12 views

goshs has a Path Traversal issue

Summary The multipart upload filename fix splits on the path separator but never rejects dot-dot, allowing a write outside the served tree. Finding Medium: upload filename escapes the served tree residual of CVE-2026-35393 The multipart filename fix updown.go lines 135-136 splits on the path...

9.8CVSS5.9AI score0.00683EPSS
SaveExploits1References3Affected Software4
Microsoft CVE
Microsoft CVE
added 2026/07/28 10:4 p.m.78 views

Chromium: CVE-2026-15115 Insufficient validation of untrusted input in WebAppInstalls

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

3.3CVSS5.8AI score0.00089EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/28 10:4 p.m.73 views

Chromium: CVE-2026-15131 Insufficient data validation in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS5.8AI score0.00172EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/07/28 10:4 p.m.10 views

Chromium: CVE-2026-15123 Insufficient data validation in DOM

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS7.2AI score0.00202EPSS
SaveExploits0
Snyk
Snyk
added 2026/07/28 9:45 p.m.11 views

Server-side Request Forgery (SSRF)

Overview datamodel-code-generator is a Datamodel Code Generator Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the getbody function, which performs DNS resolution validation separately from the actual HTTP connection. An attacker can access internal...

8.2CVSS5.5AI score0.00193EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2026/07/28 9:30 p.m.19 views

datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects

Summary datamodel-code-generator's built-in HTTP fetcher http.getbody issues an httpx.GET against any URL passed to --url or reached via a redirect chain with no allow-list, no deny-list, no IP/host validation, and followredirects=True. Loopback addresses, RFC1918 ranges, link-local 169.254.169.2...

8.2CVSS6AI score0.00209EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
added 2026/07/28 9:30 p.m.12 views

Server-side Request Forgery (SSRF)

Overview datamodel-code-generator is a Datamodel Code Generator Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the getbody function when processing URLs provided via the --url argument, as there is no validation of host or IP addresses and redirects are...

8.3CVSS5.5AI score0.00209EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/28 9:30 p.m.6 views

GHSA-RFR2-MQ9M-X2QX datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects

Summary datamodel-code-generator's built-in HTTP fetcher http.getbody issues an httpx.GET against any URL passed to --url or reached via a redirect chain with no allow-list, no deny-list, no IP/host validation, and followredirects=True. Loopback addresses, RFC1918 ranges, link-local 169.254.169.2...

8.2CVSS6AI score0.00209EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/28 9:29 p.m.46 views

CVE-2026-54691

CVE-2026-54691 affects datamodel-code-generator prior to 0.61.0; the http.get_body function in src/datamodel_code_generator/http.py accepts --url targets and redirect chains without host/IP validation, enabling server-side request forgery to loopback, private, link-local, metadata, and other netw...

8.2CVSS5.9AI score0.00209EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/28 9:29 p.m.5 views

CVE-2026-54691 datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects

datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodelcodegenerator/http.py http.getbody accepts --url targets and redirect chain targets without host/IP validation, allowing server-side request forgery against loopback, private,...

8.2CVSS5.9AI score
SaveExploits0References5
Rows per page
Query Builder