Lucene search
+L
AttackerkbRecent

87625 matches found

ATTACKERKB
ATTACKERKB
added 5 days ago11 views

CVE-2026-60074

Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...

5.9AI score0.00387EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 5 days ago12 views

CVE-2026-57859

e107 prior to version 2.3.8 contains a code execution vulnerability in the earray deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the userprefs column. The earray::unserialize function in...

7.7CVSS6.5AI score0.00399EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-12722

Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Management Panel allows Authentication Bypass. This issue affects FTC E-Commerce Management Panel: before 1.0.2...

8.2CVSS5.8AI score0.00255EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-56428

The SSH service on BSH ELP Electronic Platform modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorizedkeys file for the root user. An attacker in possession of the...

8.1CVSS5.9AI score0.00284EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-41709

VMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged...

2.7CVSS6AI score0.00382EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-41703

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service DoS condition of the host process. On Workstation...

7.6CVSS6AI score0.00556EPSS
SaveExploits0References2Affected Software6
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-47876

VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network adapter may exploit this issue to execute code on the host. Non VMXNET3 virtual adapters are no...

9.3CVSS6.3AI score0.00281EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-54368

CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx and SearchExUnder that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized...

8.8CVSS6.5AI score0.00392EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-54367

CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...

8.8CVSS5.9AI score0.00188EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago10 views

CVE-2026-54366

CentreStack before 17.4 contains an XML external entity XXE injection vulnerability that allows unauthenticated attackers to exfiltrate arbitrary files by supplying a malicious URL to the SharePoint storage configuration handler. Attackers can send a crafted request to the unauthenticated...

8.7CVSS5.9AI score0.00287EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2026-54365

CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user accounts by supplying a crafted base64-encoded XML string to exposed API endpoints. Attackers can send a malicious...

8.7CVSS6AI score0.00216EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-54364

CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit th...

6.9CVSS5.9AI score0.00252EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-54363

CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attackers to forge arbitrary encrypted tokens by exploiting a static SysNumber value used as entropy for AccessTicket.Encrypt and AccessTicket.Decrypt across all installations. Attackers can u...

9.3CVSS6.6AI score0.00394EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-59309

VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system...

9.8CVSS6.1AI score0.00744EPSS
SaveExploits0References2Affected Software5
ATTACKERKB
ATTACKERKB
added 5 days ago10 views

CVE-2026-59310

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code...

9.8CVSS6.3AI score0.0114EPSS
SaveExploits0References2Affected Software5
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-5582

The FuseWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.24.2. This is due to missing nonce verification on the togglesyncstatus function. This makes it possible for unauthenticated attackers to toggle the status of sync rules...

4.3CVSS5.7AI score0.00132EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2026-18382

A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint. When authentication.type is set to service-account, the operator sends the tenant's Red Hat SSO clientid and...

6.8CVSS5.9AI score0.0028EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-18378

A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token the default, the cluster-global Red Hat Cloud pull-secret bearer token is attached to...

7.6CVSS5.9AI score0.00239EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-18381

A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this...

7.6CVSS5.9AI score0.00197EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-7260

Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

8.1CVSS5.9AI score0.00168EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago6 views

CVE-2026-17544

Attacker-provided inputs to bccomp could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4. before 8.4.24 and from 8.5. before 8.5.9...

9.3CVSS5.9AI score0.00428EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago4 views

CVE-2026-17543

Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...

9.3CVSS5.9AI score0.00386EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago6 views

CVE-2026-15397

The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0. This is due to the plugin not properly verifying that a user is authorized to perform an action via the wpssfwinstallpluginconfiguration AJAX handler. This...

7.2CVSS5.9AI score0.00314EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 5 days ago5 views

CVE-2026-18363

A logic vulnerability in the password reset token validation routine implemented by osTicket in versions prior to v1.17.8 and v1.18.4. During the password reset process, the application retrieves the timestamp associated with the provided token and checks whether the configured validity period ha...

9.1CVSS5.9AI score0.00298EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 5 days ago6 views

CVE-2026-18369

A flaw was found in Dogtag PKI's ACME responder where the HTTP-01 challenge validator accepts IP address literals as dns identifiers and follows HTTP redirects without validating that the target is a public address. An unauthenticated ACME account holder can exploit this to perform server-side...

5.8CVSS5.8AI score0.00195EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago6 views

CVE-2026-22622

Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device...

8.8CVSS5.9AI score0.00305EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2026-22621

Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated administrator to execute arbitrary commands within a restricted environment...

8.3CVSS6.1AI score0.00584EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-22620

Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device...

8.6CVSS5.9AI score0.00362EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 5 days ago10 views

CVE-2026-16970

The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...

4.2CVSS5.8AI score0.00182EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago10 views

CVE-2026-18362

The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks...

5.9CVSS5.9AI score0.00357EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2026-16971

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...

5.9CVSS5.9AI score0.00318EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-18361

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the datastore upload function...

7.6CVSS5.8AI score0.00268EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2026-18360

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the custom attributes function...

7.6CVSS5.8AI score0.00268EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-16969

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the assets function...

7.6CVSS5.8AI score0.00183EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2022-4994

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: wean fast IN from emulatorpioin Use emulatorpioin directly for fast PIO instead of bouncing through emulatorpioin now that emulatorpioin fills "val" when handling in-kernel PIO. vcpu-arch.pio.count is guaranteed to be...

5.6AI score0.00182EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-18353

PIA's POST /v1/upload/sbom endpoint accepts a Bearer JWT and checks its unverified iss claim against an issuer allowlist using Python's urlparse before performing OIDC discovery with requests. Because urlparse and requests/urllib3 parse an authority string containing a backslash e.g...

8.8CVSS6AI score0.00239EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2026-7849

Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command into the system configuration which is subsequently executed as root...

9.8CVSS5.9AI score0.00419EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2026-44108

Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window in which internal services may become externally accessible, potentially allowing an unauthenticated remote attacker to connect to these...

9.8CVSS6.1AI score0.00462EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago10 views

CVE-2026-44107

A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that CharxModbusServer is listening, an unauthenticated attacker can perform a Denial-of-Service attack...

8.7CVSS5.8AI score0.00309EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2026-44105

The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local attacker with access to the logs to authenticate via SSH as the limited user "user-app". Charging could be interrupted...

6.6CVSS5.8AI score0.00094EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2026-44106

A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...

8.5CVSS6.1AI score0.00232EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago10 views

CVE-2026-44104

The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise...

9.8CVSS6AI score0.00241EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-44103

An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...

6.9CVSS5.9AI score0.00236EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-44102

An unauthenticated remote attacker can trigger a firmware update download via the OCPP backend by supplying an invalid firmware file. This will cause the file to remain accessible for a short period before it is deleted due to improper locking during the cleanup process...

6.9CVSS5.9AI score0.00209EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-44101

Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and confidential data being disclosed to the attacker...

9.8CVSS5.9AI score0.00401EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2026-44100

The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service and files tampering...

9.4CVSS5.9AI score0.00277EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-44099

A privilege escalation vulnerability in the system configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compromise...

8.5CVSS6.1AI score0.00232EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-44098

This vulnerability allows an unauthenticated remote attacker with control over the OCPP backend via firewall-bypass to perform an OS command injection, resulting in the execution of arbitrary commands as the limited user charx-oa. Charging could be interrupted...

8.8CVSS6.2AI score0.01367EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago8 views

CVE-2026-44097

A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of attacker-controlled files and potentially exhausting resources, which might lead to Denial-of-Service...

7.1CVSS6AI score0.00244EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-44096

A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise...

8.5CVSS6.1AI score0.00232EPSS
SaveExploits0References2Affected Software4
Total number of security vulnerabilities87625