Lucene search
+L
AttackerkbMost viewed

96138 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/31 6:45 a.m.18 views

CVE-2026-10172

A security flaw has been discovered in Bdtask Multi-Store Inventory Management System 1.0. The affected element is the function Upload of the file application/modules/dashboard/controllers/Module.php of the component Component Module. The manipulation of the argument module results in unrestricte...

6.5CVSS5.5AI score0.00206EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/31 4:00 a.m.18 views

CVE-2026-10168

A security vulnerability has been detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. Affected is the function marks of the file application/controllers/Parents.php. The manipulation of the argument param1 leads to improper control...

6.5CVSS6.3AI score0.00243EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/31 3:30 a.m.18 views

CVE-2026-10167

A weakness has been identified in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. This impacts the function signauthcookie of the file application/controllers/Login.php of the component MYController. Executing a manipulation of the argumen...

7.5CVSS6.8AI score0.00409EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/31 3:15 a.m.18 views

CVE-2026-10166

A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. This manipulation of the argument rootAPmac causes command injection. The attack is possible to be carried out remotely...

6.5CVSS6.4AI score0.01072EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/30 2:55 p.m.18 views

CVE-2018-25424

Gate Pass Management System 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the login and password parameters. Attackers can submit crafted POST requests to login-exec.php with SQL injection payloads in form...

8.8CVSS5.9AI score0.0032EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/30 2:55 p.m.18 views

CVE-2018-25418

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the year parameter. Attackers can send GET requests to year.php with crafted SQL payloads in the year parameter to extract sensiti...

8.8CVSS6.1AI score0.00276EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/30 2:55 p.m.18 views

CVE-2018-25416

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the country parameter. Attackers can send GET requests to country.php with crafted SQL payloads in the country parameter to extrac...

8.8CVSS6.1AI score0.0027EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/30 9:29 a.m.18 views

CVE-2026-7465

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.19.25. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server...

8.8CVSS6.1AI score0.01174EPSS
SaveExploits3References7
ATTACKERKB
ATTACKERKB
added 2026/05/29 7:35 p.m.18 views

CVE-2026-46599

The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height and encoded size to make the decoder decode large amounts of compressed data...

5.8AI score0.00353EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/29 7:07 p.m.18 views

CVE-2026-45613

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47...

3.3CVSS5.8AI score0.00111EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/29 6:15 p.m.18 views

CVE-2026-49366

In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion...

7.8CVSS5.8AI score0.00455EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/29 4:41 p.m.18 views

CVE-2026-6824

A stored cross-site scripting XSS vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules. Attackers can inject malicious scripts, which are then persistently stored on the device backend. When administrators o...

8.4CVSS5.7AI score0.00373EPSS
SaveExploits0References4Affected Software3
ATTACKERKB
ATTACKERKB
added 2026/05/29 3:41 p.m.18 views

CVE-2026-44962

Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath queries without proper sanitization. This allows an authenticated, low-privileged user to execute arbitrary operating system commands on the...

9.9CVSS6.1AI score0.00686EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/29 2:46 p.m.18 views

CVE-2018-25403

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to citygraph.php with crafted SQL payloads to extract sensitive database...

8.8CVSS6.1AI score0.00334EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/29 2:45 p.m.18 views

CVE-2026-10064

A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetPortTr of the file /goform/formSetPortTr. Performing a manipulation of the argument specialname results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit...

6.5CVSS7.1AI score0.00399EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/29 2:29 p.m.18 views

CVE-2026-4290

The WP Travel Pro plugin for WordPress is vulnerable to arbitrary user deletion via the /wp-json/wp-travel/v1/travel-guide/userid REST API endpoint in all versions up to, and including, 10.6.0. This is due to the checkpermission callback unconditionally returning true and the Database::delete...

9.1CVSS5.9AI score0.00258EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/29 1:30 p.m.18 views

CVE-2026-10061

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected is the function formWPS of the file /goform/formWPS. The manipulation of the argument peerPin results in command injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor...

6.5CVSS6.3AI score0.0501EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/29 1:14 p.m.18 views

CVE-2026-45580

WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a stored cross-site scripting vulnerability. The Live plugin's "YouTube-style" view renders the live transmission's stream key into an HTML class attribute by raw echo, without htmlspecialchars. A canStream user can persi...

5.4CVSS5.6AI score0.00136EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/29 12:45 p.m.18 views

CVE-2026-10074

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing privileged local attackers to exploit Relative Path Traversal to download arbitrary system files...

6.9CVSS5.9AI score0.00347EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/29 8:38 a.m.18 views

CVE-2026-49199

Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device...

10CVSS6.2AI score0.01338EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/29 8:30 a.m.18 views

CVE-2026-49198

Improper access control in the MQTT broker allows wildcard topic subscriptions, exposing all MQTT traffic to unauthorized actors...

8.3CVSS5.8AI score0.00208EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/29 8:15 a.m.18 views

CVE-2026-49196

The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands...

8.6CVSS6AI score0.0037EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/28 11:59 p.m.18 views

CVE-2026-6891

Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a specially crafted symbolic link during installation to modify permissions of files for which they would not normally have...

5.1CVSS5.8AI score0.00123EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/28 10:25 p.m.18 views

CVE-2026-9972

Uninitialized Use in Gamepad in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00226EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 10:25 p.m.18 views

CVE-2026-9969

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

6.2AI score0.00291EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 10:25 p.m.18 views

CVE-2026-9937

Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00222EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 6:35 p.m.18 views

CVE-2026-45040

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, RustFS suffers from sensitive information leakage in log outputs. When the server is run with RUSTLOG=debug sensitive credentials including SessionToken JWT, SecretAccessKey, and full JWT claims are printed in...

5.3CVSS5.8AI score0.00152EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 6:34 p.m.18 views

CVE-2026-45041

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, crates/appauth/src/token.rs ships a 2048-bit RSA private key as a string constant named TESTPRIVATEKEY and uses it in production via parselicense to "verify" license tokens. Because the key is embedded in every...

8.7CVSS5.9AI score0.00239EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 4:10 p.m.18 views

CVE-2026-44465

Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration option. This allows an attacker to achieve Remote Code Execution RCE when a victim open a folder in untrusted mode...

8.6CVSS6.1AI score0.00297EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 4:08 p.m.18 views

CVE-2026-44461

Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but environment variable keys are inserted without shell quoting or validation. If an attacker can control an environment variable key for example via project termin...

8.6CVSS6.2AI score0.00257EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 2:49 p.m.18 views

CVE-2026-48735

pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots of unnecessary elements. This vulnerability is fixed in 6.12.1...

6.9CVSS5.8AI score0.00128EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 2:24 p.m.18 views

CVE-2026-45017

Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.0, the built-in FileSystemLoader and CachingFileSystemLoader do not guard against reading files outside their search paths when given an absolute path to resolve. This allows malicious template authors to load and...

8.2CVSS5.9AI score0.00336EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 1:22 p.m.18 views

CVE-2026-49237

An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199. While the patch in version 1.16.0 updated the ownership of the multipassd daemon binary to root:wheel, five co-located binaries multipass, qemu-img, qemu-system-aarch64,...

7.8CVSS6AI score0.00154EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2026/05/28 12:52 p.m.18 views

CVE-2026-9828

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer c...

2.1CVSS6.4AI score0.0037EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/28 9:41 a.m.18 views

CVE-2026-46237

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn3: Avoid overflow on msg bound check As pointed out by SDL, the previous condition may be vulnerable to overflow. cherry picked from commit db00257ac9e4a51eb2515aaea161a019f7125e10...

7.1CVSS5.8AI score0.00013EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/05/28 9:40 a.m.18 views

CVE-2026-46228

In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers...

5.8AI score0.00117EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 9:36 a.m.18 views

CVE-2026-46164

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in createspaceinfosubgroup error path When kobjectinitandadd fails, the call chain is: createspaceinfosubgroup - btrfssysfsaddspaceinfotype - kobjectinitandadd - failure - kobjectput⊂group-kobj -...

7CVSS5.7AI score0.00136EPSS
SaveExploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 9:36 a.m.18 views

CVE-2026-46152

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop stray 'static' from fast-RX rxresult ieee80211invokefastrx is documented as safe for parallel RX, but its per-invocation rxresult is declared static. Concurrent callers then share one instance and can overwri...

5.8AI score0.00167EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/28 7:43 a.m.18 views

CVE-2026-7048

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'orderby' parameter in all versions up to, and including, 1.8.40 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

6.5CVSS5.9AI score0.00504EPSS
SaveExploits0References11
ATTACKERKB
ATTACKERKB
added 2026/05/28 4:47 a.m.18 views

CVE-2026-9803

A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with a malformed 'Authorization: Bearer' header to any client registration endpoint. This can lead to an...

5.3CVSS5.8AI score0.00417EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/05/28 12:00 a.m.18 views

CVE-2026-38703

A command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302 firmware V3.5.108, IR305 firmware V1.0.118, IR315 firmware V1.0.118, IR615 firmware V1.0.118, and earlier versions. Attackers can exploit this vulnerability to obtain ROOT privileges on remote target...

5.8AI score0.01243EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/27 7:55 p.m.18 views

CVE-2026-48792

pamusb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, src/evdev.c silently ignores EACCES errors when opening /dev/input/event nodes, causing pusbhasvirtualinputdevice to return 0 no virtual devices found even when every open call failed due to...

4.4CVSS5.8AI score0.00128EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/27 5:11 p.m.18 views

CVE-2026-45548

Budibase is an open-source low-code platform. Prior to 3.34.8, the processUrlFile function in packages/server/src/automations/steps/ai/extract.ts uses fetchfileUrl directly without the IP blacklist validation that is consistently applied to all other automation steps. This allows an authenticated...

7.7CVSS5.8AI score0.00258EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/27 3:47 p.m.18 views

CVE-2026-44321

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. The POST /upi/v1/upNodesLinks create-or-update handler accepts attacker-controlled JSON and passes it directly into...

7.5CVSS5.8AI score0.00364EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/27 3:38 p.m.18 views

CVE-2026-44329

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without OAuth2/bearer-token authorization middleware. A network attacker who can reach SMF on the SBI can hit UPI endpoints with no Authorization header at all, and...

10CVSS5.8AI score0.00331EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/27 3:10 p.m.18 views

CVE-2026-44353

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.4.0, Streamlink's HLS and DASH parsers do not validate the URI scheme of segment entries and other resources. A remote .m3u8 HLS playlist or .mpd DASH manifest can list file:///path/to/file...

6.5CVSS5.8AI score0.00345EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/27 1:07 p.m.18 views

CVE-2026-6051

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap...

5.5CVSS5.8AI score0.00177EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/27 12:59 p.m.18 views

CVE-2026-46100

In the Linux kernel, the following vulnerability has been resolved: fs: afs: revert mmapprepare change Partially reverts commit 9d5403b1036c "fs: convert most other genericfilemmap users to .mmapprepare". This is because the .mmap invocation establishes a refcount, but .mmapprepare is called at a...

5.8AI score0.00141EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/27 12:57 p.m.18 views

CVE-2026-46050

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix deadlock with check operation and nowait requests When an array check is running it will raise the barrier at which point normal requests will become blocked and increment the nrpending value to signal there is wor...

5.7AI score0.00095EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/27 9:49 a.m.18 views

CVE-2026-42759

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Timo Affiliate Super Assistent amazonsimpleadmin allows Stored XSS.This issue affects Affiliate Super Assistent: from n/a through = 1.10.1...

7.1CVSS5.8AI score0.00152EPSS
SaveExploits0References2
Total number of security vulnerabilities5000