Lucene search
+L
AttackerkbMost viewed

87421 matches found

ATTACKERKB
ATTACKERKB
added 2026/07/22 1:38 p.m.13 views

CVE-2026-13185

In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager or RadDockLayout deserialize attacker-controlled cookie content, allowing unauthenticated remote code execution...

8.1CVSS5.8AI score0.00452EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/22 6:57 a.m.13 views

CVE-2026-45820

fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressedsize=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...

8.7CVSS5.3AI score0.00255EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/20 8:11 p.m.13 views

CVE-2026-13380

VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthenticated endpoints. The credentials are present in these responses only when SFTP connections have been configured within the application. No authentication is required to retriev...

9CVSS5.5AI score0.00262EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/19 3:41 p.m.13 views

CVE-2026-64178

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnepaddconnection needs to keep holding the bnepsessionsem while reading dev-name just like bnepgetconnlist does; otherwise the bnepsession thread can concurrently free the netdevice, whi...

5.2AI score0.00249EPSS
SaveExploits0References9Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/18 10:45 p.m.13 views

CVE-2026-16196

A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component webfetch. This manipulation causes server-side request forgery. The attack can be initiated remotely. The exploit has been made...

6.5CVSS5AI score0.00289EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/18 8:15 p.m.13 views

CVE-2026-16154

A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functionality of the file /editroom1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The...

7.5CVSS7AI score0.00278EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/18 3:0 p.m.13 views

CVE-2026-16124

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function CheckSSRF/isPrivateIP of the file internal/tools/webshared.go of the component webfetch. Such manipulation leads to server-side request forgery. The attack can be launched remotel...

6.5CVSS6AI score0.0033EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/07/17 7:34 p.m.13 views

CVE-2026-48978

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as...

2.1CVSS5.2AI score0.00211EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:25 p.m.13 views

CVE-2026-47184

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache.asyncadd inserted every response record into cache, expirations, expireheap, and servicecache without a cap, allowing unauthenticated hosts on the local link over UDP/5353 224.0.0.251 / ff02::f...

6.5CVSS5.2AI score0.00241EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:21 p.m.13 views

CVE-2026-47180

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming.decodelabelsatoffset recurses once per DNS-name compression pointer, and a single mDNS packet carrying chained pointers can trigger a RecursionError that escapes DNSIncoming.init, causing...

6.5CVSS5.2AI score0.0023EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 3:18 p.m.13 views

CVE-2026-15343

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/workflows/ as the path validation d...

8.6CVSS6.3AI score0.00446EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 1:46 p.m.13 views

CVE-2024-23577

HCL Aftermarket EPC is vulnerable since the application does not have a validation for HOST header and accepts arbitrary hosts when requested in http protocol. When an application doesn’t adequately validate or sanitize this header, it can lead to several security risks, including Host header...

4.3CVSS5.6AI score0.00175EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 1:42 p.m.13 views

CVE-2024-23573

HCL Aftermarket EPC is vulnerable to attack since the Application is vulnerable to Lucky 13. that makes the SS LLUCKY13 possible affects the TLS1.1and 1.2 and DTLS1.0 or 1.2 implementations . It also affects previous versions such as SSL3.0 and TLS1.0. This can also be considered a type of...

3.7CVSS5.3AI score0.00155EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 1:36 p.m.13 views

CVE-2024-23565

HCL Aftermarket EPC is vulnerable to email flooding as the application does not have a proper mail limitation mechanism at Forget Password functionality. The actor could b e a human or an automated process such as a virus or bot. This could be used to cause a denial of service, compromise program...

5.3CVSS5.4AI score0.00238EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 10:3 a.m.13 views

CVE-2026-9602

Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...

6.5CVSS5.3AI score0.0024EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/17 3:43 a.m.13 views

CVE-2026-15161

The Ninja Forms - Excel Export plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.6. This is due to the savefilter AJAX handler storing the raw $POST'filter' array into a WordPress option via updateoption without any capability check, nonce...

6.4CVSS6.2AI score0.00156EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/17 12:6 a.m.13 views

CVE-2026-62215

OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that allows lower-trust callers to forge trusted A2UI actions. Attackers can perform actions requiring stronger authorization by submitting crafted requests through configured input paths,...

8CVSS6.1AI score0.00173EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/16 10:44 p.m.13 views

CVE-2026-44436

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, Quicly is vulnerable to a Denial of Service attack through connection state corruption. In QUIC Invariants, the maximum length of a Connection ID is 255 bytes, while QUIC...

7.5CVSS6AI score0.00278EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/16 7:27 p.m.13 views

CVE-2026-15449

A time-of-check to time-of-use TOCTOU flaw in the illumos data-link pseudo-driver dld affects handling of the DLDIOCGETMACPROP and DLDIOCSETMACPROP ioctls on /dev/dld. drviocpropcommon in usr/src/uts/common/io/dld/dlddrv.c copies the dldiocmacpropt ioctl header in once to read its prvalsize field...

5.8CVSS6.2AI score0.00084EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/16 4:49 p.m.13 views

CVE-2026-10587

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode...

6.8CVSS6.1AI score0.001EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/16 2:52 p.m.13 views

CVE-2026-54733

The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin localo365 Teams SSO endpoint ssologin.php base64-decodes a JWT payload and authenticates...

9.3CVSS6.1AI score0.00915EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/16 6:0 a.m.13 views

CVE-2026-11371

The BetterDocs WordPress plugin before 4.5.5 does not sanitise an AI-generated documentation summary before storing and outputting it, and the feature that generates it is exposed to unauthenticated users, allowing them to store a malicious payload via prompt injection that executes in the browse...

6.1CVSS6.1AI score0.00162EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/16 2:30 a.m.13 views

CVE-2026-12941

The MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient...

6.5CVSS6.1AI score0.00254EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/16 12:0 a.m.13 views

CVE-2026-36425

An issue in OPSWAT AppRemover Driver ardrv.sys v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation...

6.1AI score0.00422EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/07/15 9:26 p.m.13 views

CVE-2026-63175

PlaywrightCapture stored capture-specific configuration and runtime data as mutable class-level variables rather than instance-level variables. Consequently, multiple Capture objects running within the same Python process could share state, including HTTP headers, cookies, browser storage, HTTP...

7.1CVSS6.1AI score0.00295EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/15 9:7 p.m.13 views

CVE-2026-52890

Wekan is open source kanban built with Meteor. Prior to 9.31, Wekan allows a logged-in board member to insert an attachment document through the /attachments/insert DDP method with attacker-controlled versions.original.path and versions.original.storage fields. The server/permissions/attachments....

7.1CVSS6.2AI score0.00325EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/15 9:2 p.m.13 views

CVE-2026-55576

MaaAssistantArknights is a one-click tool for daily Arknights tasks. In the current dev-v2 workflow, .github/workflows/release-preparation.yml inlined attacker-controlled github.event.pullrequest.title into a run: shell command during the pullrequest opened, reopened, and readyforreview events, s...

8.8CVSS6.2AI score0.00297EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/15 8:34 p.m.13 views

CVE-2026-54052

n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP mode with multi-tenancy enabled through ENABLEMULTITENANT=true, n8n-mcp's local workflow version history backups were not isolated per tenant, allowing an...

9.9CVSS6.1AI score0.00228EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/15 7:15 p.m.13 views

CVE-2026-56743

Cilium is a networking, observability, and security solution. From 1.19.0 to 1.19.4, standard Kubernetes NetworkPolicy specifications using CIDR-based ipBlock rules without pod or namespace selectors erroneously generate a wildcard namespace allow rule when Cilium is configured with a custom...

5.4CVSS6.1AI score0.00158EPSS
SaveExploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/15 5:32 p.m.13 views

CVE-2026-62174

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61435. Reason: This candidate is a duplicate of CVE-2026-61435. Notes: All CVE users should reference CVE-2026-61435 instead of this candidate...

6.1AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/15 5:31 p.m.13 views

CVE-2026-61829

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-61452. Reason: This candidate is a duplicate of CVE-2026-61452. Notes: All CVE users should reference CVE-2026-61452 instead of this candidate...

6.1AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/15 2:33 p.m.13 views

CVE-2026-60065

When NGINX Plus is configured to use the Message Queuing Telemetry Transport MQTT filter module ngxstreammqttfiltermodule, unauthenticated attackers can send requests with conditions beyond the attacker's control to cause a heap buffer over-read in the NGINX worker process, leading to a restart...

6.3CVSS6.2AI score0.00265EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/15 2:33 p.m.13 views

CVE-2026-56434

NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpssimodule module. This vulnerability may exist when the Server-Side Includes SSI, proxypass, and proxybuffering off directives are configured. With this configuration, an unauthenticated attacker with man-in-the-middle MITM abili...

8.3CVSS6.1AI score0.0045EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2026/07/15 2:14 p.m.13 views

CVE-2026-61740

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, when LightRAG is deployed with LIGHTRAGAPIKEY set but AUTHACCOUNTS unset, X-API-Key protection can be bypassed because lightrag/api/auth.py falls back to a hardcoded DEFAULTTOKENSECRET, /auth-status and /login can...

9.3CVSS6.1AI score0.00402EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/15 11:25 a.m.13 views

CVE-2026-61862

ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profile value is not printable, a single byte at the end of the profile can be printed read past the profile boundary. This behavior occurs whe...

2.9CVSS6.1AI score0.00105EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/14 10:30 p.m.13 views

CVE-2026-15753

A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this vulnerability is an unknown functionality of the file /api/v1/payment/withdraw/review?action=approve. Executing a manipulation can lead to trusting http permission methods on the server side. The attack ma...

5.5CVSS5.9AI score0.00261EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/14 8:9 p.m.13 views

CVE-2026-15777

Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

6.1AI score0.00257EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/14 7:28 p.m.13 views

CVE-2026-47429

Vitest is a testing framework powered by Vite. Prior to 3.2.5 and 4.1.0, the Vitest UI/API server on Windows used isFileServingAllowed incorrectly for /vitestattachment, allowing \?\..\ path traversal to read files outside the project; exposed API write and rerun features such as saveTestFile...

9.8CVSS6.2AI score0.01011EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/14 5:6 p.m.13 views

CVE-2026-50293

Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00257EPSS
SaveExploits0References2Affected Software7
ATTACKERKB
ATTACKERKB
added 2026/07/14 5:6 p.m.13 views

CVE-2026-49801

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally...

5.5CVSS6AI score0.00298EPSS
SaveExploits0References2Affected Software18
ATTACKERKB
ATTACKERKB
added 2026/07/14 5:6 p.m.13 views

CVE-2026-50308

Integer underflow wrap or wraparound in Windows NTFS allows an unauthorized attacker to execute code locally...

7.8CVSS6.2AI score0.0036EPSS
SaveExploits0References2Affected Software18
ATTACKERKB
ATTACKERKB
added 2026/07/14 9:45 a.m.13 views

CVE-2026-3014

Milestone has released a new version of XProtect® and several cumulative patch updates which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary code in context of the Management Server...

9.1CVSS6.2AI score0.00476EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/14 8:13 a.m.13 views

CVE-2026-59083

Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite valve allowed security constraint bypass for some configurations. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.56, from 9.0.0.M1 through 9.0.119, from 8.5.0...

9.1CVSS6.1AI score0.0037EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/14 7:32 a.m.13 views

CVE-2026-59674

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1...

8.5CVSS6.1AI score0.00129EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/13 1:26 p.m.13 views

CVE-2026-6847

Remote Code Execution vulnerability exists in ThemisNETPanel due to missing authentication for a critical file upload function. The application exposes an endpoint that allows unauthenticated attackers to upload arbitrary PHP files by providing a base64-encoded payload and to execute arbitrary co...

9.3CVSS6.3AI score0.00584EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/13 8:41 a.m.13 views

CVE-2026-57814

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows DOM-Based XSS.This issue affects Forminator: from n/a through = 1.55.0.1...

7.1CVSS6.1AI score0.00142EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/13 3:41 a.m.13 views

CVE-2026-9492

The MBStorage DRAM lighting control module within Gigabyte Control Center GCC developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIOx64.sys bundled with the module, thereby arbitrari...

8.5CVSS6.1AI score0.00109EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/11 1:1 p.m.13 views

CVE-2026-61447

PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent.executepython that executes LLM-generated Python code without AST validation, import restrictions, or sandbox enforcement. Attackers can influence LLM output through prompt injection to exfiltrate all environment...

10CVSS6.7AI score0.00742EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/10 9:32 a.m.13 views

CVE-2026-13010

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via 'event' Shortcode Attribute in all versions up to, and including, 5.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient...

6.5CVSS6.1AI score0.00247EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/10 9:5 a.m.13 views

CVE-2026-41880

R-SOFT DMS is vulnerable to OS Command Injection in the Optical Character Recognition OCR module. Multiple command execution functions accept user-controllable file paths without proper sanitization before passing them to the system shell via SSH. In current infrastructure the URL encoding...

9CVSS6.2AI score0.01011EPSS
SaveExploits0References2
Total number of security vulnerabilities5000