Lucene search
+L
AttackerkbRecent

88296 matches found

ATTACKERKB
ATTACKERKB
added 2026/07/09 4:51 p.m.10 views

CVE-2026-59217

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, the file upload path accepted metadata.knowledgeid and auto-linked uploaded files to a target knowledge base without applying the write-access check used by /api/v1/knowledge//file/add, allowing...

4.3CVSS6AI score0.00292EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 4:48 p.m.10 views

CVE-2026-59216

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, geteventcall delivered execute:python and execute:tool Socket.IO events to a client-supplied sessionid after checking only that the session was connected, allowing authenticated users who learne...

7.7CVSS6AI score0.00308EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 4:45 p.m.12 views

CVE-2026-15193

A vulnerability was determined in AidanPark openclaw-android up to 0.4.0. The affected element is an unknown function of the file android/app/src/main/java/com/openclaw/android/JsBridge.kt of the component Android WebView Bridge. This manipulation causes os command injection. The attack can only ...

5.3CVSS5.5AI score0.00683EPSS
SaveExploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 4:43 p.m.11 views

CVE-2026-59219

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0 with Redis configured, Socket.IO connect, user-join, join-channels, join-note, and the terminal websocket first-message authentication used decodetoken without the Redis-backed...

7.1CVSS5.9AI score0.00305EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 4:33 p.m.11 views

CVE-2026-58125

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/09 4:30 p.m.11 views

CVE-2026-15192

A vulnerability has been found in mettle sendportal up to 3.0.1. This issue affects the function sendgrid/postmark/postal/mailjet of the component APIv1 Webhooks. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. The exploit has been disclosed to...

6.9CVSS5.3AI score0.00572EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 4:16 p.m.10 views

CVE-2026-59715

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.16 before 0.10.0, the Socket.IO server is configured with alwaysconnect=True. The ydoc:awareness:update and ydoc:document:leave Socket.IO handlers accepted collaborative-document events without requirin...

3.1CVSS5.9AI score0.00222EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 4:14 p.m.10 views

CVE-2026-58459

gpsd through release-3.27.5, fixed at commit 4c06658, contains a command injection vulnerability in gpsprof that allows attackers who control the GPS device subtype value to execute arbitrary shell commands by embedding backtick payloads in the gnuplot plot title without proper escaping. The...

8.4CVSS6.3AI score0.01796EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2026/07/09 4:9 p.m.15 views

CVE-2026-59220

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.2 before 0.10.0, the SKILLMENTIONRE and stripre regular expressions in backend/openwebui/utils/middleware.py parsed skill mentions with overlapping quantifiers, allowing an authenticated chat message...

6.5CVSS6AI score0.00372EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 4:6 p.m.10 views

CVE-2026-59226

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0, executeautomation rehydrated automation owners without rechecking that they were still active or still had features.automations, and checkmodelaccess only enforced private-model grants...

3.1CVSS6AI score0.00303EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 4:0 p.m.10 views

CVE-2026-15191

A flaw has been found in mettle sendportal up to 3.0.1. This vulnerability affects unknown code of the file vendor/mettle/sendportal-core/src/Http/Requests/CampaignStoreRequest.php of the component Campaign Creation Endpoint. Executing a manipulation can lead to authorization bypass. The attack c...

6.5CVSS6.2AI score0.0022EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:56 p.m.11 views

CVE-2026-59227

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.11 before 0.10.0, POST /api/v1/images/edit required only a verified account and did not enforce the global image-edit switch or the per-user image-generation permission, allowing a non-admin user to...

4.3CVSS6AI score0.00259EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:53 p.m.13 views

CVE-2026-59218

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, the /api/v1/auths/signin endpoint looked users up by email and only ran bcrypt password verification when a credential existed, making registered-account attempts measurably slower than...

5.3CVSS5.9AI score0.0024EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:51 p.m.10 views

CVE-2026-59214

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, Open WebUI runs client-side Python with Pyodide in a same-origin web worker, allowing stored chat payloads that use pyodide.http.pyfetch or the js module fetch and XMLHttpRequest APIs to issue...

7.3CVSS6.1AI score0.00286EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:45 p.m.13 views

CVE-2026-15190

A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown part of the file /login.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and m...

7.5CVSS6.9AI score0.00328EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:44 p.m.10 views

CVE-2026-53987

The Tag plugin for GLPI 11 before 2.14.4 stores the tag name without HTML sanitization and renders it into the Kanban badge markup via PluginTagTag::preKanbanContent without output escaping, resulting in stored cross-site scripting. An authenticated user with TAG MANAGEMENT create or update right...

7.3CVSS5.6AI score0.00341EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:32 p.m.11 views

CVE-2026-59209

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated member with use-only editor access to a shared workflow could read credential-populated headers exposed via the $request object inside an HTTP Request node's pagination expression and...

7.1CVSS5.9AI score0.00295EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:30 p.m.10 views

CVE-2026-59206

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated user with the default workflow:create permission could pollute Object.prototype through a crafted workflow saved, updated, or imported via the workflow API, allowing unauthenticated reques...

7.1CVSS5.9AI score0.0038EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:30 p.m.10 views

CVE-2026-15189

A security vulnerability has been detected in aerostackdev aerostack-mcp up to 6315dfde7df0a15aaf743f88d91347115e09ba23. Affected by this issue is the function uploadmedia of the component mcp-whatsapp. Such manipulation of the argument mediaurl leads to server-side request forgery. The attack ma...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:27 p.m.12 views

CVE-2026-59208

n8n is an open source workflow automation platform. Prior to 2.27.4 and from 2.28.0 prior to 2.28.1, n8n instances configured with more than one trusted token-exchange issuer resolved external identities to local accounts using only the JWT sub claim and ignored the iss claim, allowing an attacke...

7.6CVSS5.9AI score0.00314EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:16 p.m.12 views

CVE-2026-59207

n8n is an open source workflow automation platform. Prior to 2.27.4 and 2.28.1, the AI Agents feature did not enforce the Allowed HTTP Request Domains restriction configured on credentials when an MCP tool was pointed at an arbitrary URL, allowing a member-level user with use-only access to a...

7.1CVSS6.1AI score0.00263EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:16 p.m.12 views

CVE-2026-42486

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...

9.4CVSS6AI score0.0014EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:15 p.m.14 views

CVE-2026-23562

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...

9.4CVSS6AI score0.0014EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:15 p.m.12 views

CVE-2026-15188

A weakness has been identified in manjurulhoque django-job-portal up to dfa352f305bba44445ac5dc12e9b2a98c9dcd71f. Affected by this vulnerability is the function EditEmployeeProfileAPIView of the file accounts/api/views.py of the component Employee Dashboard Endpoint. This manipulation of the...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:13 p.m.10 views

CVE-2026-11404

Cesanta Mongoose before 7.22 contains an out-of-bounds read in the built-in TLS server function mgtlsserverrecvhello, which uses an attacker-controlled sessionidlen byte from a TLS ClientHello as a buffer index without validating it against the length of received data. A remote, unauthenticated...

8.7CVSS6.2AI score0.00347EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:13 p.m.13 views

CVE-2026-23561

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...

9.4CVSS6AI score0.0014EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:12 p.m.10 views

CVE-2026-23560

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...

9.4CVSS6AI score0.0014EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:9 p.m.10 views

CVE-2026-23559

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:...

9.4CVSS6AI score0.0014EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 3:6 p.m.9 views

CVE-2026-61474

An improper authorization check in MISP’s attribute creation endpoint allowed an authenticated user with permission to add attributes to submit a sharinggroupid without triggering the corresponding sharing group authorization check, as long as the attribute distribution value was not explicitly s...

5.3CVSS6AI score0.00244EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:48 p.m.9 views

CVE-2026-23556

When oxenstored is tearing a domain down, the node data is cleaned up but the usage counts are leaked. When the domain ID is eventually reused, the new domain can create fewer nodes before beeing deemed to be over quota...

9.4CVSS5.9AI score0.00137EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:45 p.m.9 views

CVE-2025-58151

varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF. Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the shared buffer. The...

9.4CVSS6.2AI score0.0012EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:42 p.m.9 views

CVE-2025-58146

There are multiple issues. 1. Updates to the XAPI database sanitise input strings, but try generating the notification using the unsanitised input. This causes the database's event thread to terminate and cease further processing. 2. XAPI's UTF-8 encoder implements v3.0 of the Unicode spec, but...

9.4CVSS5.9AI score0.00137EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:35 p.m.13 views

CVE-2025-27464

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The Windows PV drivers expose various facilities to userspace. Several of these have no security descriptor, and are therefore fully accessible to unprivileged users. The...

9.4CVSS6.1AI score0.00158EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:30 p.m.11 views

CVE-2026-15187

A security flaw has been discovered in enquirer up to 2.4.1. Affected is the function Enquirer.set of the component Public Package API. The manipulation of the argument question.name results in improperly controlled modification of object prototype attributes. The attack can be launched remotely...

5.3CVSS5.6AI score0.00248EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:29 p.m.12 views

CVE-2025-27463

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The Windows PV drivers expose various facilities to userspace. Several of these have no security descriptor, and are therefore fully accessible to unprivileged users. The...

9.4CVSS6.1AI score0.00158EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:27 p.m.11 views

CVE-2025-27462

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The Windows PV drivers expose various facilities to userspace. Several of these have no security descriptor, and are therefore fully accessible to unprivileged users. The...

9.4CVSS6.1AI score0.00158EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:19 p.m.14 views

CVE-2026-60109

Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a crafted KRBERROR message with error-code 25 KDCERRPREAUTHREQUIRED containing a PA-DATA element with padata-type 2, 3,...

8.7CVSS6AI score0.00502EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:16 p.m.11 views

CVE-2026-60108

Zeek before 8.0.9 contains an uncontrolled memory consumption vulnerability in the FTP analyzer that allows unauthenticated remote attackers to cause process termination by sending a crafted FTP control session negotiating AUTH GSSAPI followed by a large ADAT control line. Attackers can exploit t...

8.7CVSS6.2AI score0.00436EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:15 p.m.12 views

CVE-2026-54801

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application contains insufficient validation of authentication credentials when processing administrative account modifications through the we...

8.6CVSS5.9AI score0.0034EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:15 p.m.12 views

CVE-2026-54800

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application ships with a default configuration that disables all OPC UA security mechanisms. This could allow an attacker to gain unauthorized...

6.3CVSS5.9AI score0.00146EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:15 p.m.11 views

CVE-2026-54799

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application contains a vulnerability in its firmware update mechanism's signature validation process. This could allow an attacker to install...

8.4CVSS6.3AI score0.00127EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:15 p.m.11 views

CVE-2026-54798

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt th...

7.1CVSS5.9AI score0.0024EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 2:13 p.m.12 views

CVE-2026-5005

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Twiser Informatics Technology Consulting, Trade and Education Inc. OKRs & Goals allows Stored XSS. This issue affects OKRs & Goals: from 28220 before 28398...

5.4CVSS5.9AI score0.00133EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 1:49 p.m.10 views

CVE-2026-56292

Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension 10.11.1 - A SQLi vulnerability in AcyMailing component 10.11.1 for Joomla was discovered. Exploiting this flaw can lead to unauthorized database access and data leakage...

9.2CVSS5.8AI score0.00311EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 1:26 p.m.14 views

CVE-2026-60095

Vinchin Backup & Recovery through 9.0.0.86562 contains a stack buffer overflow vulnerability in the ModuleHandShake function of the agentlinkserver service that allows unauthenticated remote attackers to overwrite the saved return address by supplying an oversized listenuuid field that is measure...

6.9CVSS6.2AI score0.00463EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/09 1:25 p.m.10 views

CVE-2026-60094

Vinchin Backup & Recovery through 9.0.0.86562 contains a heap buffer overflow vulnerability that allows unauthenticated remote attackers to cause process crash or memory corruption by sending a malformed TCP packet with an unchecked bodylen field to the agentlinkserver service. Attackers can craf...

6.9CVSS6.2AI score0.00411EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/09 1:15 p.m.9 views

CVE-2026-4256

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in PEAKUP Technology Inc. PassGate allows LDAP Injection. This issue affects PassGate: through 30042026...

8.2CVSS5.9AI score0.00213EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 1:15 p.m.11 views

CVE-2026-15186

A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation of the argument orderId leads to improper control of resource identifiers. The attack can be initiated remotely. The...

6.5CVSS6.3AI score0.00237EPSS
SaveExploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/09 12:56 p.m.10 views

CVE-2026-12879

An Improper Input Validation vulnerability in BigQuery DAO in Google Cloud Apigee versions prior to 2026-06-12 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-tenant data. This vulnerability was patched on 12 June 2026 on the Apigee Servers, and no customer action is...

5.9CVSS6AI score0.00188EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/09 12:37 p.m.9 views

CVE-2026-14261

A vulnerability in the Xerte Online Tools allows for authentication bypass and remote code execution via reinstallation through the /setup/ folder, enabling attackers to reinstall the service to a remote database they control...

6.6AI score0.00847EPSS
SaveExploits0References4
Total number of security vulnerabilities88296