Lucene search
+L
AttackerkbRecent

87936 matches found

ATTACKERKB
ATTACKERKB
added 2026/07/17 7:14 p.m.15 views

CVE-2026-60137

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the authornotin parameter of WPQuery, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter...

9.1CVSS5.8AI score0.79029EPSS
SaveExploits48References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 7:13 p.m.8 views

CVE-2026-8056

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override component parameters at runtime via the API. A critical security flaw exists in the parameter filtering mechanism within the applytweaks function...

8.8CVSS5.3AI score0.00294EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 7:12 p.m.8 views

CVE-2026-45704

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 LTS and 12.3.6, CustomReports uses inconsistent authorization between the report listing endpoint and the report detail endpoint in bundles/CustomReportsBundle/src/Controller/Reports/CustomReportController.php and...

7.1CVSS5.3AI score0.00314EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 7:11 p.m.12 views

CVE-2026-8476

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses Python's unsafe pickle.loads function to deserialize cached objects from disk without validation, integrity verification, or...

9.9CVSS6.5AI score0.00493EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 7:10 p.m.8 views

CVE-2026-8481

IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the code validation API endpoint. The POST /api/v1/validate/code endpoint accepts user-supplied Python code and executes it directly using Python's built-in exec function without sandboxing, input...

9.9CVSS6.9AI score0.00458EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 7:10 p.m.9 views

CVE-2026-44739

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 LTS and 12.3.6, the columnConfigAction endpoint in bundles/CustomReportsBundle/src/Controller/Reports/CustomReportController.php passes malicious SQL configuration through CustomReportController:columnConfigAction,...

8.7CVSS5.8AI score0.00285EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 7:8 p.m.10 views

CVE-2026-45260

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 LTS and 12.3.7, Pimcore's WebDAV asset endpoint exposes a MOVE operation through /asset/webdavpath without an authentication plugin in bundles/CoreBundle/src/Controller/WebDavController.php, and...

8.1CVSS5.3AI score0.00427EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 7:6 p.m.9 views

CVE-2026-8505

IBM Langflow OSS 1.0.0 through 1.10.0 has a vulnerability in Langflow's webhook authentication logic allows unauthenticated users to trigger the execution of any flow. The system incorrectly bypasses API key validation when the WEBHOOKAUTHENABLE configuration is set to False which is the default...

9.8CVSS6.1AI score0.0056EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 7:5 p.m.7 views

CVE-2026-12283

Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard SQL. Athena Query Federation is a feature that allows you to connect to data sources outside of Amazon S3 like DynamoDB, Azure Synapse, and custom connectors using standard SQL...

6.8CVSS6AI score0.00432EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 7:2 p.m.7 views

CVE-2026-8635

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipulating the database, execute arbitrary system commands, and achieve full system compromise with Langflow service permissions...

9.9CVSS5.7AI score0.00301EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:58 p.m.6 views

CVE-2026-8859

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations due to improper input validation in the APIRequest component. A path traversal vulnerability exists when the "Save to File" feature is enabled, where filenames extracted from HT...

9.9CVSS5.5AI score0.00368EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:54 p.m.8 views

CVE-2026-8861

IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

5.3CVSS5.3AI score0.0024EPSS
SaveExploits0References2Affected Software4
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:52 p.m.7 views

CVE-2026-45703

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 LTS and 12.3.7, the WordExport export flow in bundles/WordExportBundle/src/Controller/TranslationController.php only checks the wordexport feature permission and directly resolves attacker-controlled type/id input...

6.4CVSS5.3AI score0.00188EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:50 p.m.8 views

CVE-2026-45162

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 LTS and 12.3.7, multiple Pimcore locations call PHP's unserialize on data from database columns and filesystem files without the allowedclasses restriction, including lib/Tool/Authentication.php, models/Site/Dao.php...

8CVSS6.3AI score0.00574EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:49 p.m.15 views

CVE-2026-9103

IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/autologin endpoint. The endpoint issues long-lived superuser bearer tokens without requiring authentication when the AUTOLOGIN configuration is enabl...

9.8CVSS5.4AI score0.00411EPSS
SaveExploits2References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:48 p.m.6 views

CVE-2026-9135

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 commit 94981c443d4918517b9e8163d70fc598dc33a32d contain a code injection vulnerability in the Policies component's ToolGuard integration that bypasses the allowcustomcomponents=false security control. The vulnerability exists...

9.9CVSS6.1AI score0.0045EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:47 p.m.7 views

CVE-2026-58195

Agentic-Flow is an AI agent orchestration platform. Prior to 2.0.14, agentic-flow MCP server tools in src/mcp/standalone-stdio.ts, src/mcp/fastmcp/servers/claude-flow-sdk.ts, src/mcp/fastmcp/servers/stdio-full.ts, src/mcp/fastmcp/servers/http-streaming-updated.ts,...

8.8CVSS5.8AI score0.00456EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:40 p.m.7 views

CVE-2026-45309

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0, AsyncSSH expands the OpenSSH-compatible AuthorizedKeysFile %u token in asyncssh/config.py, asyncssh/connection.py,...

8.2CVSS4.7AI score0.0044EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:35 p.m.9 views

CVE-2026-50185

RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler. From 0.1.1 until 0.5.4, the aarch64 implementations of Cmov and CmovEq in cmov/src/backends/aarch64.rs assume high bits ar...

2CVSS5.4AI score0.00112EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:32 p.m.9 views

CVE-2026-52746

JSONata is a JSON query and transformation language. Prior to 2.2.0 and 1.8.9, malicious non-matching inputs to the $toMillis function can cause superlinear backtracking in the ISO-8601 validation regex, leading to denial of service in applications that evaluate user-provided JSONata expressions...

7.5CVSS5.5AI score0.00379EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:28 p.m.12 views

CVE-2026-48487

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, readcharacterstring and readstring in src/zeroconf/protocol/incoming.py advanced self.offset by attacker-declared RDLENGTH without checking it against self.datalen, allowing unauthenticated hosts on th...

5.3CVSS5.2AI score0.00203EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:26 p.m.11 views

CVE-2026-48045

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query, each up to MAXMSGABSOLUTE = 8966 bytes, in self.deferredaddr and armed a per-address timer in self.timersaddr without...

6.5CVSS5.2AI score0.0023EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:26 p.m.8 views

CVE-2026-9171

IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...

7.5CVSS5.9AI score0.00314EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:25 p.m.13 views

CVE-2026-47184

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache.asyncadd inserted every response record into cache, expirations, expireheap, and servicecache without a cap, allowing unauthenticated hosts on the local link over UDP/5353 224.0.0.251 / ff02::f...

6.5CVSS5.2AI score0.00241EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:22 p.m.12 views

CVE-2026-47183

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.6, DNSIncoming.logexceptiondebug and the four QuietLogger exception-dedup methods stored an unbounded seenlogs dictionary keyed by attacker-influenced IncomingDecodeError messages, retaining sys.excinfo...

6.5CVSS5.2AI score0.00241EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:21 p.m.13 views

CVE-2026-47180

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming.decodelabelsatoffset recurses once per DNS-name compression pointer, and a single mDNS packet carrying chained pointers can trigger a RecursionError that escapes DNSIncoming.init, causing...

6.5CVSS5.2AI score0.0023EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:19 p.m.11 views

CVE-2026-53712

SCRAM Salted Challenge Response Authentication Mechanism is part of the family of Simple Authentication and Security Layer SASL, RFC 4422 authentication mechanisms. Prior to 3.3, a flaw in com.ongres.scram:scram-client and com.ongres.scram:scram-common allows an attacker capable of a TLS...

8.2CVSS5.3AI score0.00167EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:16 p.m.12 views

CVE-2026-49835

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.1.0, the global wrapMetrics middleware records raw HTTP request path r.URL.Path and raw HTTP request method r.Method as Prometheus labels for latency and request count metric vectors before routing, allowing an...

5.9CVSS5.3AI score0.00447EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:15 p.m.8 views

CVE-2026-16073

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function Star.texttoimage/NetworkRenderStrategy.render of the file astrbot/core/star/base.py of the component T2I Feature. The manipulation leads to cross site scripting. The attack is...

5.1CVSS3.3AI score0.00191EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 6:1 p.m.10 views

CVE-2026-50273

Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or DDTRACEBAGGAGEMAXBYTES on extraction, allowing a remote...

7.5CVSS5.4AI score0.00482EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:58 p.m.8 views

CVE-2026-48009

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a low-privilege admin user with userrecovery:read ACL can take over any admin account by triggering POST /api/action/user/user-recovery, reading the password recovery hash through POST /api/search/user-recovery, and using PAT...

6.8CVSS5.3AI score0.00272EPSS
SaveExploits0References7Affected Software2
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:56 p.m.10 views

CVE-2026-48014

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the order state transition features /api/action/order/orderId/state/transition and similar transaction and delivery transition routes in src/Core/Checkout/Order/Api/OrderActionController.php do not declare...

6.5CVSS5.2AI score0.00233EPSS
SaveExploits0References6Affected Software2
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:55 p.m.8 views

CVE-2026-48010

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, UserController::upsertUser in src/Core/Framework/Api/Controller/UserController.php writes raw user data in SYSTEMSCOPE without filtering the admin field, so a non-admin API user with user:create or user:update ACL permission...

6.5CVSS5.3AI score0.00264EPSS
SaveExploits0References6Affected Software2
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:54 p.m.14 views

CVE-2026-48016

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the Store API endpoint /store-api/handle-payment in src/Core/Checkout/Payment/SalesChannel/HandlePaymentMethodRoute.php accepts a user-controlled orderId and forwards it to src/Core/Checkout/Payment/PaymentProcessor.php witho...

4.3CVSS5.3AI score0.00238EPSS
SaveExploits0References6Affected Software2
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:53 p.m.8 views

CVE-2026-48015

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, SVG files are in the allowedextensions whitelist in src/Core/Framework/Resources/config/packages/shopware.yaml and can be uploaded via the media manager without SVG content sanitization in the upload pipeline from...

4.9CVSS5.2AI score0.00278EPSS
SaveExploits0References6Affected Software2
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:47 p.m.8 views

CVE-2026-48008

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a non-admin API user with integration:create ACL privilege can escalate to full administrator by creating an integration with admin: true through the Sync API POST /api/action/sync; the regular integration endpoint POST...

6.5CVSS5.3AI score0.00264EPSS
SaveExploits0References6Affected Software2
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:36 p.m.8 views

CVE-2026-9198

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/autologin mints SUPERUSER tokens to any network caller with /api/v1/validate/code executes user code via exec to achieve full RCE on default Langflow deployments...

9.8CVSS5.4AI score0.01886EPSS
SaveExploits3References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:33 p.m.8 views

CVE-2026-9202

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEWUSERISACTIVE=true documented deployment option, newly created accounts are immediately active and can authenticate to reach RCE endpoints, bypassing the need...

9.8CVSS5.3AI score0.00279EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:25 p.m.8 views

CVE-2026-9762

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control...

7.8CVSS6.2AI score0.00165EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:22 p.m.8 views

CVE-2025-59866

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary...

3.3CVSS5.3AI score0.00074EPSS
SaveExploits0References2Affected Software3
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:11 p.m.10 views

CVE-2026-21764

HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions...

3.1CVSS5.2AI score0.00153EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:10 p.m.9 views

CVE-2026-21762

HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections against common web-based attacks such as clickjacking, MIME-type sniffing, and cross-site scripting...

3.7CVSS4.7AI score0.00171EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:10 p.m.10 views

CVE-2026-21761

HCL DevOps Loop is affected by a Cross-Origin Resource Sharing CORS misconfiguration. Improper CORS configuration may allow unauthorized cross-origin requests, potentially exposing application resources to untrusted domains...

4.2CVSS5.3AI score0.00145EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:6 p.m.8 views

CVE-2026-21760

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality Forced Browsing vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints...

4.6CVSS5.3AI score0.00148EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 4:59 p.m.12 views

CVE-2026-12694

Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0...

9.1CVSS5.3AI score0.00243EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 4:59 p.m.11 views

CVE-2026-54496

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2gadgets 0.5.0, orchard 0.14.0, zcashprimitives 0.28.0, and zcashd 6.20.0, the variable-base scalar multiplication gadget in halo2gadgets/src/ecc/chip/mul/incomplete.rs used assignadvice for the base point without a copy...

9.3CVSS5.4AI score0.0021EPSS
SaveExploits0References8Affected Software5
ATTACKERKB
ATTACKERKB
added 2026/07/17 4:50 p.m.8 views

CVE-2026-12693

Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0...

9.4CVSS5.3AI score0.00264EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/17 4:43 p.m.8 views

CVE-2026-16104

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys,...

4.3CVSS5.4AI score0.00204EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/17 4:43 p.m.12 views

CVE-2026-16103

A flaw was found in the keycloak-services component of Keycloak. This issue is an incomplete fix for CVE-2026-9798, where brute-force protection checks were added to the Client-Initiated Backchannel Authentication CIBA initiation handler but were omitted from the token redemption handler. This...

4.3CVSS5.3AI score0.00207EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/17 4:43 p.m.8 views

CVE-2026-16106

A flaw was found in the admin REST API of Keycloak, a solution for identity and access management. The issue occurs when a delegated administrator attempts to remove a child role from a composite role. Due to missing authorization checks, an attacker with limited administrative permissions can...

4.9CVSS5.3AI score0.00201EPSS
SaveExploits0References3
Total number of security vulnerabilities87936