Lucene search
+L

63234 matches found

Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.11 views

PT-2026-56171

Name of the Vulnerable Software and Affected Versions sssd affected versions not specified rhcos affected versions not specified Description A flaw exists in the SSSD LDAP sudo provider due to insecure default configuration and improper scoping of LDAP searches. When the ldap sudo search base...

8.8CVSS6.1AI score0.00522EPSS
SaveExploits0References49
Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.15 views

PT-2026-56172

Name of the Vulnerable Software and Affected Versions SSSD affected versions not specified Description A path traversal flaw exists in the AD GPO provider of SSSD. The ad gpo extract smb components function fails to sanitize .. sequences within the gPCFileSysPath LDAP attribute. This allows an...

8.8CVSS5.9AI score0.00522EPSS
SaveExploits0References53
Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.9 views

PT-2026-56280

Name of the Vulnerable Software and Affected Versions mem0 openmemory/api affected versions not specified Description The openmemory/api component allows unauthenticated access to API routers that lack authentication middleware. This enables attackers to read, write, and delete arbitrary user...

9.8CVSS6AI score0.00498EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.20 views

PT-2026-56269

Name of the Vulnerable Software and Affected Versions Labcenter Proteus version 9 Description An out-of-bounds write issue exists where an attacker can cause the program to write data beyond the end of an allocated memory buffer, potentially leading to arbitrary code execution. Recommendations...

8.4CVSS6.2AI score0.0014EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.8 views

PT-2026-56281

Name of the Vulnerable Software and Affected Versions Fire-Boltt Smartwatch FB BGS001 version MOY-JS14-2.0.4 Description Improper authentication allows the device to accept GATT Write Request commands without sufficient authentication or strong session validation. This enables a nearby device to...

9.8CVSS6.1AI score0.00373EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2026/07/07 12:0 a.m.6 views

The vulnerability of the `zipfile.is_zipfile()` function in the Python programming language’s pip module allows a hacker to write arbitrary files.

The vulnerability of the zipfile.iszipfile function in the Python programming language involves unlimited downloading of files of a dangerous type. Exploiting this vulnerability could allow an attacker to download any type of files...

3.3CVSS6AI score0.00144EPSS
SaveExploits0References10Affected Software2
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.10 views

RHEL 10 : freerdp (RHSA-2026:36203)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36203 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

9.8CVSS7.4AI score0.03665EPSS
SaveExploits5References12
Positive Technologies
Positive Technologies
added 2026/07/07 12:0 a.m.14 views

PT-2026-56210

Name of the Vulnerable Software and Affected Versions EGroupware versions prior to 26.2.20260224 EGroupware versions prior to 23.1.20260224 Description An issue allows an authenticated attacker to execute arbitrary commands on the server, which may lead to full system compromise. If user...

9.3CVSS6.3AI score0.01028EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/06 9:52 p.m.10 views

GHSA-QRWJ-VH9X-GW5V Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write

Summary agentConn.apiClient used the default redirect behavior of http.Client while its custom transport dialed the host from the request URL as long as the port was the workspace agent HTTP API port 4. Agent tailnet IPs are deterministic from agent UUIDs, so a malicious workspace agent could...

8.3CVSS6.2AI score
SaveExploits0References3
NVD
NVD
added 2026/07/06 9:16 p.m.18 views

CVE-2026-57571

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no confinement. A filename containing an absolute path or travers...

9.6CVSS0.00596EPSS
SaveExploits1References2
OSV
OSV
added 2026/07/06 9:16 p.m.5 views

PYSEC-2026-2138

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no confinement. A filename containing an absolute path or travers...

9.6CVSS6.3AI score0.00596EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/07/06 8:48 p.m.7 views

CVE-2026-34038

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, an authenticated remote command injection vulnerability in application deployment handling allows users with application write permissions to achieve remote code execution...

9.9CVSS6.6AI score0.0175EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/07/06 8:9 p.m.26 views

CVE-2026-57571

CVE-2026-57571 affects Crawl4AI prior to version 0.9.0. The vulnerability arises when saving downloaded files: the destination filename is taken from attacker-controlled input and joined to the downloads directory without confinement. If the filename contains an absolute path or traversal, it esc...

9.6CVSS6.4AI score0.00596EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/07/06 8:9 p.m.39 views

CVE-2026-57571 Crawl4AI arbitrary file write via download filename path traversal

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no confinement. A filename containing an absolute path or travers...

9.6CVSS0.00596EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/07/06 8:9 p.m.8 views

CVE-2026-57571

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no confinement. A filename containing an absolute path or travers...

9.6CVSS6.4AI score0.00596EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/07/06 8:9 p.m.8 views

CVE-2026-57571 Crawl4AI arbitrary file write via download filename path traversal

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no confinement. A filename containing an absolute path or travers...

9.6CVSS6.4AI score0.00596EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/07/06 8:9 p.m.11 views

CVE-2026-21384 Out-of-bounds Write in Camera Driver

Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits...

5.3CVSS6AI score0.00056EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/06 8:9 p.m.39 views

CVE-2026-21370 Out-of-bounds Write in Camera Driver

Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values...

5.3CVSS0.0006EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/06 8:9 p.m.20 views

CVE-2026-21369

CVE-2026-21369 describes a memory corruption in the camera driver when handling flash commands. The root cause is outdated LED count values being used after userspace modification, leading to out-of-bounds/write conditions. The weakness is limited to local attack vector with high complexity and l...

5.3CVSS6AI score0.0006EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/06 8:9 p.m.15 views

CVE-2026-21369 Out-of-bounds Write in Camera Driver

Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification...

5.3CVSS6AI score0.0006EPSS
SaveExploits0References1
Rows per page
Query Builder