Lucene search
+L
AttackerkbMost viewed

96138 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/08 2:21 p.m.18 views

CVE-2026-43387

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: properly validate the data in rtwgetieex Just like in commit 154828bf9559 "staging: rtl8723bs: fix out-of-bounds read in rtwgetie parser", we don't trust the data in the frame so we should check the length...

5.8AI score0.00123EPSS
SaveExploits0References9Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/08 11:24 a.m.18 views

CVE-2026-3318

Open redirection vulnerability in the latest demo version of the Cradle eCommerce platform. The vulnerability occurs in the login form endpoint, where the ‘returnUrl’ parameter allows redirection because the web application accepts a URL as a parameter without properly validating it. As a result,...

5.3CVSS5.8AI score0.00339EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/08 3:55 a.m.18 views

CVE-2026-42278

UltraDAG is a minimal DAG-BFT blockchain in Rust. Prior to commit fb6ef59, the UltraDAG StateEngine implementation of SmartTransferTx contains a critical logic flaw in its policy enforcement pipeline. When a transaction originates from a "Pocket" a derived sub-address documented in the protocol a...

8.8CVSS5.8AI score0.00375EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/08 3:38 a.m.18 views

CVE-2026-42208

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An...

9.8CVSS6AI score0.8942EPSS
SaveExploits8References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/07 11:45 p.m.18 views

CVE-2026-8117

A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects some unknown processing of the file /admin/index.php. Such manipulation of the argument page leads to cross site scripting. The attack may be launched remotely. The exploit has been...

5.3CVSS4.2AI score0.00269EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/07 1:51 p.m.18 views

CVE-2026-42011

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities CAs only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate...

7.4CVSS5.8AI score0.00475EPSS
SaveExploits0References19
ATTACKERKB
ATTACKERKB
added 2026/05/07 4:18 a.m.18 views

CVE-2026-41413

Istio is an open platform to connect, manage, and secure microservices. Prior to versions 1.28.6 and 1.29.2, when a RequestAuthentication resource is created with a jwksUri pointing to an internal service, istiod makes an unauthenticated HTTP GET request to that URL without filtering out localhos...

5CVSS5.7AI score0.00329EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/06 5:21 p.m.18 views

CVE-2026-29090

Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and 40.1.1, in FilterEngine.createpostgresquery. This allows any authenticated Rucio user to execute arbitrary SQL against the PostgreSQL metadata database through the DID search endpoin...

9CVSS6.4AI score0.00301EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/06 1:46 p.m.18 views

CVE-2025-31982

HCL BigFix Service Management SM had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclosure or misuse of sensitive functionality...

3.7CVSS5.8AI score0.00153EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/05 9:29 p.m.18 views

CVE-2026-28780

Heap-based Buffer Overflow vulnerability in modproxyajp of Apache HTTP Server. If modproxyajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to modproxyajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue...

5.8AI score0.01376EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/05 6:35 p.m.18 views

CVE-2026-27960

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation vulnerability that can be exploited by unauthenticated attackers to query the API as any existing user, including the default admi...

9.8CVSS5.7AI score0.00584EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/05 6:43 a.m.18 views

CVE-2026-5192

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 1.52.1 via the 'upload-1filefilepath' parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary...

7.5CVSS5.9AI score0.00773EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/04 6:13 p.m.18 views

CVE-2026-42154

Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint /api/v1/read does not validate the declared decoded length in a snappy-compressed request body before allocating memory. An unauthenticated attacker can send a sma...

7.5CVSS5.8AI score0.00813EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/04 4:43 p.m.18 views

CVE-2025-47405

Memory corruption when processing camera sensor input/output control codes with invalid output buffers...

7.8CVSS5.8AI score0.00075EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/04 2:48 p.m.18 views

CVE-2026-29169

A NULL pointer dereference in moddavlock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.moddavlock is not used internally by moddav or moddavfs. The only known use-case for moddavlock was moddavsvn from Apache Subversion earlier than...

7.5CVSS5.8AI score0.00594EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/04 2:42 p.m.18 views

CVE-2026-33006

A timing attack against modauthdigest in Apache HTTP Server 2.4.66 allows a bypass of Digest authentication by a remote attacker. Users are recommended to upgrade to version 2.4.67, which fixes this issue...

5.8AI score0.00557EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/05/04 7:00 a.m.18 views

CVE-2026-7742

A flaw has been found in CodeAstro Online Classroom 1.0. The affected element is an unknown function of the file /OnlineClassroom/facultylogin. Executing a manipulation of the argument fid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

6.5CVSS6.5AI score0.00241EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/02 1:26 p.m.18 views

CVE-2026-3504

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.1 via the '/dokan/v1/stores/id/reviews' REST API endpoint. This is due to the 'preparereviewsforresponse' method...

5.3CVSS5.8AI score0.0026EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/02 3:36 a.m.18 views

CVE-2026-7209

The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's qcopd-directory shortcode in all versions up to, and including, 8.9.2. This is due to insufficient input sanitization and output escaping on user supplied attributes such as titlefontsize...

6.4CVSS6AI score0.00195EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/05/01 1:55 p.m.18 views

CVE-2026-31698

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed When retrieving the PDH cert, don't attempt to copy the blobs to userspace if the firmware command failed. If the failure was due to an invalid length...

6AI score0.00126EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/29 8:22 a.m.18 views

CVE-2026-42515

This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated attacker could exploit this vulnerability by manipulating parameter in the API request URL to gain unauthorized access to sensitive information of patients on the targeted system...

7.1CVSS5.3AI score0.00226EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/29 7:51 a.m.18 views

CVE-2026-42412

Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP User Frontend: from n/a through 4.3.1...

6.5CVSS5.1AI score0.00195EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/28 6:45 a.m.18 views

CVE-2026-4911

The Booking Package plugin for WordPress is vulnerable to Price Manipulation in versions up to, and including, 1.7.06 This is due to the intentForStripe function passing user-controlled $POST'amount' directly to the Stripe PaymentIntent API without validation, and the commitStripe function ignori...

5.3CVSS5.7AI score0.00308EPSS
SaveExploits0References11
ATTACKERKB
ATTACKERKB
added 2026/04/27 11:24 p.m.18 views

CVE-2026-41366

OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that allows model-initiated arbitrary host file read. Attackers can exploit improper media parent directory validation to exfiltrate credentials and access sensitive files...

6CVSS5.5AI score0.00181EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/24 6:32 p.m.18 views

CVE-2026-41414

Skim is a fuzzy finder designed to through files, lines, and commands. The generate-files job in .github/workflows/pr.yml checks out attacker-controlled fork code and executes it via cargo run, with access to SKIMRSBOTPRIVATEKEY and GITHUBTOKEN contents:write. No gates prevent exploitation - any...

7.4CVSS5.4AI score0.00281EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/04/24 2:42 p.m.18 views

CVE-2026-31599

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvchannelpmtmatchsections syzbot reported a general protection fault in vidtvpsidescassign 1. vidtvpsipmtstreaminit can return NULL on memory allocation failure, but...

5.2AI score0.00125EPSS
SaveExploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/23 11:19 p.m.18 views

CVE-2026-29197

In versions 8.4.0, 8.3.2, 8.2.2, 8.1.3, 8.0.4, 7.13.6, 7.12.7, 7.11.7, and 7.10.10, the endpoints /api/apps/logs and /api/apps/:id/logs have a typo in the required permission check, allowing authenticated users without the proper permissions to read apps-engine logs...

5.8AI score0.00182EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/23 2:54 p.m.18 views

CVE-2026-34003

A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash,...

7.8CVSS5.7AI score0.0025EPSS
SaveExploits0References38
ATTACKERKB
ATTACKERKB
added 2026/04/23 2:53 p.m.18 views

CVE-2026-33999

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of servi...

7.8CVSS5.9AI score0.0038EPSS
SaveExploits0References38
ATTACKERKB
ATTACKERKB
added 2026/04/23 9:30 a.m.18 views

CVE-2026-6887

Borg SPM 2007 Sales Ended in 2008 developed by BorG Technology Corporation has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

9.8CVSS6AI score0.00358EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/23 3:54 a.m.18 views

CVE-2026-41232

Froxlor is open source server administration software. Prior to version 2.3.6, in EmailSender::add, the domain ownership validation for full email sender aliases uses the wrong array index when splitting the email address, passing the local part instead of the domain to...

5CVSS5.8AI score0.00231EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/22 1:46 a.m.18 views

CVE-2026-41458

OwnTone Server versions 28.4 through 29.0 contain a race condition vulnerability in the DAAP login handler that allows unauthenticated attackers to crash the server by exploiting unsynchronized access to the global DAAP session list. Attackers can flood the DAAP /login endpoint with concurrent...

8.2CVSS5.8AI score0.00364EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/21 11:41 p.m.18 views

CVE-2026-41133

pyLoad is a free and open-source download manager written in Python. Versions up to and including 0.5.0b3.dev97 cache role and permission in the session at login and continues to authorize requests using these cached values, even after an admin changes the user's role/permissions in the database...

8.8CVSS5.7AI score0.00325EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/21 8:35 p.m.18 views

CVE-2026-22014

Vulnerability in the Oracle User Management product of Oracle E-Business Suite component: Workflow and Business Events. Supported versions that are affected are 12.2.7-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle User...

3.8CVSS5.7AI score0.00193EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/21 12:41 p.m.18 views

CVE-2026-6777

Other issue in the Networking: DNS component. This vulnerability was fixed in Firefox 150 and Thunderbird 150...

5.3CVSS5.8AI score0.00161EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/20 11:08 p.m.18 views

CVE-2026-41329

OpenClaw before 2026.3.31 contains a sandbox bypass vulnerability allowing attackers to escalate privileges via heartbeat context inheritance and senderIsOwner parameter manipulation. Attackers can exploit improper context validation to bypass sandbox restrictions and achieve unauthorized privile...

9.9CVSS5.8AI score0.00298EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/20 11:08 p.m.18 views

CVE-2026-41299

OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the chat.send gateway method where ACP-only provenance fields are gated by self-declared client metadata from WebSocket handshake rather than verified authorization state. Authenticated operator clients can spoof ACP...

7.1CVSS5.8AI score0.00203EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/20 1:00 p.m.18 views

CVE-2026-6648

A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used. The...

5.1CVSS4.1AI score0.00195EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/19 10:00 p.m.18 views

CVE-2026-6579

A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0. This impacts an unknown function of the file blog/views.py of the component Clean Endpoint. This manipulation causes missing authentication. The attack may be initiated remotely. The exploit has been made available to the...

6.9CVSS5.4AI score0.00433EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/17 8:56 p.m.18 views

CVE-2026-40302

zrok is software for sharing web services, files, and network resources. Prior to version 2.0.1, the proxyUi template engine uses Go's text/template which performs no HTML escaping instead of html/template. The GitHub OAuth callback handlers in both publicProxy and dynamicProxy embed the...

6.1CVSS5.8AI score0.00209EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/17 7:25 p.m.18 views

CVE-2026-32107

xrdp is an open source RDP server. In versions through 0.10.5, the session execution component did not properly handle an error during the privilege drop process. This improper privilege management could allow an authenticated local attacker to escalate privileges to root and execute arbitrary co...

8.8CVSS6.2AI score0.00159EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/15 6:58 p.m.18 views

CVE-2026-40915

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then subjected to a heap buffer overflow when processing pixel...

5.5CVSS6.2AI score0.00375EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/14 9:36 p.m.18 views

CVE-2026-33146

Docmost is open-source collaborative wiki and documentation software. An authorization bypass vulnerability in versions 0.70.0 through 0.70.2 exposes restricted child page titles and text snippets through the public search endpoint POST /api/search/share-search for publicly shared content. This...

4.3CVSS5.8AI score0.00275EPSS
SaveExploits2References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/14 5:33 p.m.18 views

CVE-2026-27246

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session...

9.3CVSS5.2AI score0.00304EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/14 1:12 p.m.18 views

CVE-2025-7389

A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted authority of the AdminServer process itself. The delegated authority of the AdminServer could allow its users the ability to read...

8.2CVSS5.9AI score0.00326EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/14 6:43 a.m.18 views

CVE-2026-2582

The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'accountholder' parameter in all versions up to, and including, 3.20.5. This is due to the software allowing users to execute an action that does not properly validate a value before running...

6.5CVSS6.2AI score0.00424EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/13 5:49 p.m.18 views

CVE-2026-32316

jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvpstringappend and jvpstringcopyreplacebad functions, where concatenating strings with a combined length exceeding 2^31 bytes causes a 32-bit unsigned integer overflow in the buffer...

8.2CVSS6.1AI score0.00484EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/04/10 5:51 p.m.18 views

CVE-2026-32932

Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Open Redirect vulnerability in the session course edit page allows an attacker to redirect an authenticated administrator to an arbitrary external URL after saving coach assignment changes. The redirect also leaks th...

4.7CVSS5.9AI score0.00178EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/09 3:43 p.m.18 views

CVE-2026-39843

Plane is an an open-source project management tool. From 0.28.0 to before 1.3.0, the remediation of GHSA-jcc6-f9v6-f7jw is incomplete which could lead to the same full read Server-Side Request Forgery when a normal html page contains a link tag with an href that redirects to a private IP address ...

7.7CVSS5.9AI score0.00246EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/09 2:49 p.m.18 views

CVE-2026-4878

A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use TOCTOU race condition in the capsetfile function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so,...

7CVSS5.8AI score0.00206EPSS
SaveExploits2References35
Total number of security vulnerabilities5000