Lucene search
+L
AttackerkbMost viewed

96138 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/15 5:41 p.m.22 views

CVE-2026-46474

Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage...

5.8AI score0.00316EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/14 7:52 p.m.22 views

CVE-2026-8569

Out of bounds write in Codecs in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. Chromium security severity: Medium...

8.3CVSS5.8AI score0.00246EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/14 7:52 p.m.22 views

CVE-2026-8566

Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00182EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/14 5:30 a.m.22 views

CVE-2026-3829

The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'wplebasicgetrequests' function in all versions up to, and including, 7.8.5.10. This makes...

5.4CVSS5.8AI score0.00202EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/13 3:17 p.m.22 views

CVE-2026-44432

urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion 1 during the second HTTPResponse.readamt=N call when the response was decompressed using the official Brotli library or 2 when...

8.9CVSS5.8AI score0.0068EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/13 3:02 p.m.22 views

CVE-2026-44459

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/utils/jwt allows tokens with non-spec-compliant claim values to silently bypass time-based checks. This issue is not...

3.8CVSS5.8AI score0.00216EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/13 2:22 p.m.22 views

CVE-2020-37174

WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering XSS payloads in design tab textfields. Attackers can inject JavaScript code through fields like 'Text for block toggle' a...

5.5CVSS5.7AI score0.00256EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/13 4:26 a.m.22 views

CVE-2026-7051

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 8.9.0. This is due to a missing ownership verification in the B2SPostTools::deleteUserPublishPost and B2SPostTools::deleteUserSchedPost functions,...

5.4CVSS5.9AI score0.00409EPSS
SaveExploits0References15
ATTACKERKB
ATTACKERKB
added 2026/05/12 9:06 p.m.22 views

CVE-2026-44871

Command injection vulnerabilities exist in the command line interface CLI service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying...

7.2CVSS6.1AI score0.01226EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/12 4:14 p.m.22 views

CVE-2026-5089

YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 sexagesimal parsing code in perlsyck.h has a buffer underflow bug in both intbase60 and floatbase60 handlers. When processing the leftmost segment of a colon-separated value e.g., the 1 in 1:30:45, the inner while loop...

6AI score0.00333EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/11 7:30 p.m.22 views

CVE-2026-8320

A security vulnerability has been detected in jishenghua jshERP up to 3.6. This affects the function getUserByWeixinCode of the file jshERP-boot/src/main/java/com/jsh/erp/service/UserService.java of the component updatePlatformConfigByKey Endpoint. Such manipulation of the argument weixinUrl lead...

5.8CVSS5.5AI score0.00223EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/11 4:46 p.m.22 views

CVE-2026-45006

OpenClaw before 2026.4.23 contains an improper access control vulnerability in the gateway tool's config.apply and config.patch operations that allows compromised models to write unsafe configuration changes by bypassing an incomplete denylist protection. Attackers can persist malicious config...

8.8CVSS5.8AI score0.00489EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/11 4:46 p.m.22 views

CVE-2026-45004

OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd during provider setup metadata resolution. Attackers can execute arbitrary JavaScript under the current user account by placing a malicious...

8.4CVSS6.4AI score0.00144EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/09 7:38 p.m.22 views

CVE-2026-42256

Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. From versions 0.4.0 to before 0.4.24, 0.5.0 to before 0.5.14, and 0.6.0 to before 0.6.4, when authenticating a connection with SCRAM-SHA1 or SCRAM-SHA256, a hostile server can perform a computational...

6CVSS5.7AI score0.00299EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/07 1:48 p.m.22 views

CVE-2026-41687

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.8.1, the SSRF protection in endpoints/subscription/add.php line 42 and endpoints/payments/add.php line 40 uses an inline IP validation check FILTERFLAGNOPRIVRANGE | FILTERFLAGNORESRANGE that does not block...

4.3CVSS5.7AI score0.00204EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/07 12:00 a.m.22 views

CVE-2026-30496

The Optoma CinemaX P2 projector firmware TVOS-04.24.010.04.01, Android 8.0.0 exposes an HTTP API on TCP port 2345 that allows full unauthenticated remote control of the device. The API supports both reading configuration 74 endpoints and writing/modifying settings including volume, mute,...

5.9AI score0.00326EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/06 7:40 a.m.22 views

CVE-2026-43097

In the Linux kernel, the following vulnerability has been resolved: PCI: hv: Fix double idafree in hvpciprobe error path If hvpciprobe fails after storing the domain number in hbus-bridge-domainnr, there is a call to free this domainnr via pcibusreleaseemuldomainnr, however, during cleanup, the...

5.7AI score0.0012EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/05 4:30 a.m.22 views

CVE-2026-7822

A vulnerability was identified in itsourcecode Courier Management System 1.0. This impacts an unknown function of the file /printpdets.php. The manipulation of the argument ids leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...

6.5CVSS6.5AI score0.00196EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/04 12:37 p.m.22 views

CVE-2026-24072

An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. Users are recommended to upgrade to version 2.4.67, which fixes this issue...

5.8AI score0.00654EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/30 12:00 a.m.22 views

CVE-2026-36759

A Server-Side Request Forgery SSRF in the /themes/name/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request...

5.2AI score0.00209EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/29 6:00 p.m.22 views

CVE-2026-7397

A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function checksensitivepath of the file tools/filetools.py. The manipulation results in symlink following. Attacking locally is a requirement. The exploit has been released to the public and may be used for...

4.8CVSS4.8AI score0.00138EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/28 4:28 a.m.22 views

CVE-2026-6551

The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute of the timeline-blocks/tb-timeline-blocks block in all versions up to, and including, 1.1.10 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS5.5AI score0.00195EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/04/24 2:45 p.m.22 views

CVE-2026-31668

In the Linux kernel, the following vulnerability has been resolved: seg6: separate dstcache for input and output paths in seg6 lwtunnel The seg6 lwtunnel uses a single dstcache per encap route, shared between seg6inputcore and seg6outputcore. These two paths can perform the post-encap SID lookup ...

5.4AI score0.00443EPSS
SaveExploits0References9Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/22 1:46 a.m.22 views

CVE-2026-41458

OwnTone Server versions 28.4 through 29.0 contain a race condition vulnerability in the DAAP login handler that allows unauthenticated attackers to crash the server by exploiting unsynchronized access to the global DAAP session list. Attackers can flood the DAAP /login endpoint with concurrent...

8.2CVSS5.8AI score0.00364EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/21 8:37 p.m.22 views

CVE-2026-33518

An incorrect privilege assignment vulnerability exists in Esri Portal for ArcGIS 11.5 in Windows and Linux that allows highly privileged users to create developer credentials that may grant more privileges than expected...

9.8CVSS5.8AI score0.00295EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/21 8:35 p.m.22 views

CVE-2026-34308

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: JSON. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

6.5CVSS5.7AI score0.00303EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/17 7:27 p.m.22 views

CVE-2026-32105

xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification for the Message Authentication Code MAC signature of encrypted RDP packets when using the "Classic RDP Security" layer. While the sender correctly generates signatures, the receiving logic lacks th...

9.3CVSS5.6AI score0.00174EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/16 12:54 a.m.22 views

CVE-2026-40960

Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment. If at least one mod is listed as secure.trustedmods or secure.httpmods, then a crafted mod can intercept the request for the insecure environment or HTTP API, and also receive access to it...

8.1CVSS5.8AI score0.00171EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/15 12:30 p.m.22 views

CVE-2026-25219

The accesskey and connectionstring connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure...

5.8AI score0.00552EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/14 5:33 p.m.22 views

CVE-2026-27246

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session...

9.3CVSS5.2AI score0.00304EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/13 1:40 p.m.22 views

CVE-2026-31423

In the Linux kernel, the following vulnerability has been resolved: net/sched: schhfsc: fix divide-by-zero in rtscmin m2sm converts a u32 slope to a u64 scaled value. For large inputs e.g. m1=4000000000, the result can reach 2^32. rtscmin stores the difference of two such u64 values in a u32...

6AI score0.0012EPSS
SaveExploits0References9Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/12 10:45 p.m.22 views

CVE-2026-6133

A vulnerability was identified in Tenda F451 1.0.0.7cnsvn7958. This affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and mig...

9CVSS6.4AI score0.00541EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/06 12:00 a.m.22 views

CVE-2025-54324

An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect Handling of a DL NAS Transport packet leads to a...

5.9AI score0.00278EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/02 7:03 p.m.22 views

CVE-2026-34761

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

5.8CVSS5.8AI score0.00317EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/02 4:08 p.m.22 views

CVE-2026-33950

Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0-beta.4, there is a privilege escalation vulnerability by Admin Role Injection via /enableSecurity. An unauthenticated attacker can gain full Administrator access to the SignalK server at any time...

9.4CVSS5.8AI score0.00418EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/01 8:46 p.m.22 views

CVE-2025-13916

IBM Aspera Shares 1.9.9 through 1.11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

5.9CVSS5.9AI score0.00203EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/30 2:06 p.m.22 views

CVE-2026-28526

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LISTPLAYERAPPLICATIONSETTINGATTRIBUTES and LISTPLAYERAPPLICATIONSETTINGVALUES handlers that allows attackers to read beyond buffer boundaries. A nearby attacker with a paired Bluetooth...

3.5CVSS6AI score0.00143EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/29 8:50 p.m.22 views

CVE-2026-4176

Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib. Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-2026-3381 due to a vendored version of...

9.8CVSS5.9AI score0.00727EPSS
SaveExploits1References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/26 7:40 p.m.22 views

CVE-2026-32286

The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic...

5.8AI score0.0065EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/25 4:15 p.m.22 views

CVE-2026-32507

Deserialization of Untrusted Data vulnerability in Elated-Themes Leroux leroux allows Object Injection.This issue affects Leroux: from n/a through 1.4...

5.8AI score0.00167EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/25 10:25 a.m.22 views

CVE-2026-31788

In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: restrict usage in unprivileged domU The Xen privcmd driver allows to issue arbitrary hypercalls from user space processes. This is normally no problem, as access is usually limited to root and the hypervisor will den...

8.2CVSS5.8AI score0.00154EPSS
SaveExploits0References9Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/24 6:38 p.m.22 views

CVE-2026-29772

Astro is a web framework. Prior to version 10.0.0, Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because JSON.parse allocates a V8 heap object for every element in the input, a crafted payload of many small JSON objects achiev...

5.9CVSS5.8AI score0.0037EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/24 12:24 a.m.22 views

CVE-2026-4676

Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.9AI score0.00359EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/20 7:59 p.m.22 views

CVE-2026-33139

PySpector is a static analysis security testing SAST Framework engineered for modern Python development workflows. PySpector versions 0.1.6 and prior are affected by a security validation bypass in the plugin system. The validateplugincode function in pluginsystem.py, performs static AST analysis...

8.3CVSS5.9AI score0.00169EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/20 9:22 a.m.22 views

CVE-2026-33125

Frigate is a network video recorder NVR with realtime local object detection for IP cameras. In versions 0.16.2 and below, users with the viewer role can delete admin and low-privileged user accounts. Exploitation can lead to DoS and affect data integrity. This issue has been patched in version...

7.1CVSS5.7AI score0.00243EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/19 10:33 p.m.22 views

CVE-2026-33395

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, the discourse-graphviz plugin contains a stored cross-site scripting XSS vulnerability that allows authenticated users to inject malicious JavaScript code through DOT graph definitions. F...

4.4CVSS5.7AI score0.00212EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/18 9:33 p.m.22 views

CVE-2026-32742

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.17 and 8.6.42, an authenticated user can overwrite server-generated session fields sessionToken, expiresAt, createdWith when creating a session object via POST...

4.3CVSS5.9AI score0.00306EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/17 11:24 p.m.22 views

CVE-2026-27448

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for...

6.3CVSS5.8AI score0.00241EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/15 1:19 a.m.22 views

CVE-2026-1883

The Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the deletefolders function due to missing validation on a user controlled key. This makes it possibl...

5.8AI score0.00233EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/14 9:05 p.m.22 views

CVE-2026-0849

Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker to corrupt kernel memory and potentially hijack execution...

3.8CVSS6AI score0.0024EPSS
SaveExploits1References2
Total number of security vulnerabilities5000