Lucene search
+L

378128 matches found

CVE
CVE
added 4 days ago15 views

CVE-2025-69947

CVE-2025-69947 affects SourceCodester Tailor Management System 1.0, with a vulnerability in the PHP component customeredit.php?id=1 that allows SQL Injection. The CVSS 3.1 score is 9.8 (CRITICAL) with network attack vector, no authentication, and high impacts to confidentiality, integrity, and av...

9.8CVSS6AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago7 views

CVE-2025-69935

The CVE-2025-69935 entry concerns CodeAstro Membership Management System 1.0, with a SQL Injection vulnerability in report.php and revenue_report.php exploitable via the fromDate parameter. The provided metrics show CVSS 3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges or u...

9.8CVSS6AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago11 views

CVE-2026-51272

The connected AttackerkB entry documents a vulnerability in schreibfaul1 ESP32-audioI2S 3.4.5: a heap-based buffer overflow in latinToUTF8() used for Latin-1 to UTF-8 conversion. The code determines the required buffer size by simply doubling the input length and reallocates a heap buffer without...

6.2AI score0.00425EPSS
SaveExploits0
CVE
CVE
added 4 days ago6 views

CVE-2025-69930

CodeAstro Membership Management System 1.0 is affected by a SQL Injection vulnerability in print_membership_card.php?id=1. The associated CVE (CVE-2025-69930) has a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, low attack complexity, no privileges required, and no user interaction, ...

9.8CVSS6AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago17 views

CVE-2026-51291

CVE-2026-51291 is reflected in several connected sources as a use-after-free vulnerability in sqlite 3.41. The issue is reported in the jsonCacheInsert function of the JSON cache management module. Details across sources indicate affected product/version and the underlying flaw, but explicit impa...

5.9AI score0.00307EPSS
SaveExploits0
CVE
CVE
added 4 days ago12 views

CVE-2026-51292

CVE-2026-51292 affects SQLite 3.41, describing a use-after-free in the memory buffer processing logic. The vulnerability allows remote attackers to craft input that can lead to arbitrary code execution, information leakage, or denial of service. The available documents identify the affected produ...

6.2AI score0.00267EPSS
SaveExploits0
CVE
CVE
added 4 days ago9 views

CVE-2026-51293

CVE-2026-51293 is a use-after-free in SQLite 3.41. The vulnerability occurs in the jsonBlobAppendNode() function when it is invoked after sqlite3DbFree() has been called on the aBlob member of the Parse structure. Documents do not provide exploit details, affected version ranges beyond 3.41, or r...

5.9AI score0.00145EPSS
SaveExploits0
CVE
CVE
added 4 days ago17 views

CVE-2025-69938

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the membershipType parameter. CVSS 3.1 base score 9.8 (CRITICAL) with network access, low attack complexity, no privileges, and user interaction not required. Impact is high for confidentiality, integrity, ...

9.8CVSS6AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago13 views

CVE-2026-51290

CVE-2026-51290 entry is rejected/not used and does not represent an active vulnerability.

5.9AI score0.00347EPSS
SaveExploits0
CVE
CVE
added 5 days ago23 views

CVE-2026-62343

CVE-2026-62343 – ImageMagick heap buffer over-write during morphology with a user-supplied invalid kernel. Affected products/versions: ImageMagick before 6.9.13-51 and 7.0.1-0, and before 7.1.2-26. The flaw is triggered during morphology operations using a crafted kernel, leading to a heap buffer...

4.7CVSS5.9AI score0.00124EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago11 views

CVE-2026-64685

ImageMagick vulnerability CVE-2026-64685 affects the BGR decoder. In versions prior to 7.1.2-27, the BGR decoder does not check for an end-of-file in every location, which could lead to a heap buffer over-read when processing a crafted image. The issue has been fixed in version 7.1.2-27. The CVSS...

5.3CVSS6AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago9 views

CVE-2026-53547

Technical details for CVE-2026-53547 are not publicly available in the provided documents. Monitor for updates on affected products, impact, and remediation.

0.00039EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago21 views

CVE-2026-67595

CVE-2026-67595 affects VaahCMS versions 2.0.0–2.3.4. The vulnerability is a malicious obfuscated JavaScript payload embedded in the Blade template used to render security OTP emails, which can execute in any browser with JavaScript enabled. The payload opens a WebSocket connection to a hardcoded ...

9.2CVSS6.1AI score0.00422EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago9 views

CVE-2026-15157

undici is vulnerable to CRLF injection via a duck-typed blob-like request body’s type property when used as the Content-Type header on HTTP/1.1 dispatchers. Affected ranges: undici before 6.28.0; 7.0.0–before 7.29.0; and 8.0.0–before 8.9.0. An attacker supplying a hand-rolled blob-like body deriv...

4.2CVSS5.9AI score0.00142EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago11 views

CVE-2026-14643

undici vulnerability CVE-2026-14643 affects the cache interceptor in shared-cache mode. In undici versions 7.0.0–7.28.x and 8.0.0–8.8.x, the Cache-Control directive parser mishandles whitespace around the equals sign, causing the directive to be dropped or stored with literal quotes. This can cau...

5.9CVSS5.8AI score0.00229EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago17 views

CVE-2026-16728

Undici contains a defect in its retry interceptor: after a retry or resume of a partial response, it can assemble a body whose length differs from the Content-Length observed by the application. In affected ranges (before 6.28.0, 7.0.0–7.28.x, and 8.0.0–7.29.0 to 8.8.x), a faulty upstream may ret...

4.8CVSS5.8AI score0.00164EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago17 views

CVE-2026-67439

CVE-2026-67439 affects OliveTin prior to 3000.17.0. The StartActionAndWait and StartActionByGetAndWait endpoints in service/internal/api/api.go return full LogEntry output after execution without enforcing the logs permission, enabling a user with exec permission but logs:false to read action out...

4.3CVSS6AI score0.00252EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago13 views

CVE-2026-67438

OliveTin versions 3000.2.0 through 3000.17.0 expose a vulnerability where the checkShellArgumentSafety function does not treat regex: custom argument types as unsafe for Shell mode actions. This allows values that pass typeSafetyCheckRegex to be interpolated by wrapCommandInShell into an sh -c co...

6.6CVSS5.9AI score0.00995EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago25 views

CVE-2026-67437

OliveTin: The CVE-2026-67437 issue is in the OAuth2 login path (service/internal/auth/otoauth2/restapi_auth_oauth2.go) where per-login state is stored in an unbounded registeredStates map on every /oauth/login request. This can allow an unauthenticated attacker to exhaust memory and cause a denia...

7.5CVSS5.9AI score0.00354EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago14 views

CVE-2026-54249

CVE-2026-54249 affects Pydantic AI (Python agent framework) when using a Pydantic AI UI adapter (e.g., Vercel AI adapter). Versions 1.65.0–1.105.0 and 2.0.0b1–2.0.0b5 allow an attacker to reference arbitrary files in the application’s model-provider or cloud-storage account via UploadedFile refer...

6.8CVSS5.9AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago48 views

CVE-2026-46678

Pydantic AI CVE-2026-46678 affects versions 1.56.0–1.98.0 where force_download='allow-local' on a URL influenced by untrusted input can bypass the cloud-metadata blocklist using IPv6 transition forms (IPv4-mapped IPv6, 6to4, NAT64, NAT64/isatap variants). The issue is mitigated by upgrading to 1....

6.8CVSS5.8AI score0.00441EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago17 views

CVE-2026-13308

CVE-2026-13308 affects Autel MaxiCharger AC Elite Home EV chargers. The flaw lies in the handling of WebSocket messages for the OCPP service, caused by insufficient validation of user-supplied data that can trigger an integer underflow before buffer allocation. This can allow an attacker to execu...

8.1CVSS7.7AI score0.00567EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago17 views

CVE-2026-13307

CVE-2026-13307 affects Autel MaxiCharger AC Elite Home EV chargers. The vulnerability is a heap-based buffer overflow in the handling of custom USB packets, caused by insufficient validation of the length of user-supplied data before copying to a fixed-length heap buffer. This can enable a physic...

6.8CVSS7.1AI score0.00344EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago15 views

CVE-2026-13309

Affected product : Autel MaxiCharger AC Elite Home NFC interface. Vulnerability : stack-based buffer overflow in NFC card response handling that can lead to arbitrary code execution . Impact : attacker with physical access can execute code on the device, with full control in its context; benefits...

6.8CVSS7.2AI score0.00228EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago10 views

CVE-2026-13306

Autel MaxiCharger AC Elite Home EV chargers are affected by CVE-2026-13306: a flaw in the exposed USB interface allows physically present attackers to bypass authentication without prior authentication. The issue stems from lack of authentication before accessing functionality, enabling bypass on...

4.3CVSS5.9AI score0.00183EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago23 views

CVE-2026-13305

Autel MaxiCharger AC Elite Home EV chargers are affected by CVE-2026-13305 due to improper verification of cryptographic signatures during software updates. The flaw in update image validation allows a physically present attacker to execute arbitrary code on the device with no authentication. Imp...

6.4CVSS7.1AI score0.00121EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago16 views

CVE-2026-65975

CVE-2026-65975 affects Pydantic AI AG-UI Adapter (AG-UI via Agent.to_ag_ui()/AGUIAdapter and Vercel AI via VercelAIAdapter) in Pydantic AI versions 1.88.0–1.107.0 and 2.0.0b1–2.4.x. The bug arises because sanitize_messages uses a stripping index computed before sanitization, so when a trailing cl...

6.5CVSS5.9AI score0.00207EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago11 views

CVE-2026-67436

CVE-2026-67436 affects Linuxfabrik monitoring-plugins (6.0.0 and earlier), specifically the redfish-* plugins. The root cause is that these plugins build request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, enabling a malicious or compromised BMC to ...

8.3CVSS5.9AI score0.00249EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago6 views

CVE-2026-67435

The issue in linuxfabrik-lib affects the Python module lib.url.fetch() in versions before 6.0.0. It may follow cross-origin redirects while forwarding caller-supplied credential headers other than Authorization and Cookie, enabling a malicious redirect-capable server to receive headers such as X-...

6CVSS5.9AI score0.00286EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago8 views

CVE-2026-67433

CVE-2026-67433 affects Linuxfabrik monitoring-plugins (Python plugins for Icinga/Nagios). In version 6.0.0, the logfile check legacy database migration used a predictable path under /tmp via os.rename(), enabling a local user with plugin-account access to place a symlink that is followed by sqlit...

5.8CVSS5.9AI score0.0008EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago21 views

CVE-2026-67432

CVE-2026-67432 affects the MCP Ruby SDK before version 0.23.0. The vulnerability exists in MCP::Server::Transports::StreamableHTTPTransport of the mcp gem, which reads and parses an entire JSON-RPC POST body without a size limit, allowing an unauthenticated remote attacker to exhaust memory on th...

7.5CVSS6AI score0.00436EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago35 views

CVE-2026-67431

The CVE affects the MCP Ruby SDK (Model Context Protocol) prior to version 0.23.0. In MCP::Server::Transports::StreamableHTTPTransport, the session ID is not bound to a session owner, allowing a stolen session ID to cause requests (tools/call) to execute in the victim’s session. This is fixed in ...

8.3CVSS6AI score0.00276EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago11 views

CVE-2026-63119

The CVE affects the MCP Ruby SDK (mcp gem), specifically MCP::Server::Transports::StdioTransport and MCP::Client::Stdio. The vulnerability arises from using IO#gets without a byte limit, allowing an attacker to send data without a newline and trigger unbounded line buffering, causing memory exhau...

6.2CVSS5.9AI score0.00129EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago65 views

CVE-2026-5057

ATEN Unizon RpcProviderMissing Authentication Denial-of-Service Vulnerability (CVE-2026-5057) affects the RpcProvider component. The flaw is due to missing authentication prior to granting access to RpcProvider functionality, enabling remote attackers to cause a denial-of-service condition. The i...

7.5CVSS7.2AI score0.00484EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago10 views

CVE-2026-67430

CVE-2026-67430 affects the MCP Ruby SDK (mcp gem) prior to 0.23.0. The vulnerability is in MCP::Server::Transports::StreamableHTTPTransport, which does not expire sessions by default, allowing repeated initialize requests to retain unbounded ServerSession objects and cause memory exhaustion. The ...

5.3CVSS5.9AI score0.00291EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago98 views

CVE-2026-5056

GStreamer qtdemux CVE-2026-5056 is a stack-based buffer overflow affecting the qtdemux component. The flaw occurs while parsing UncompressedFrameConfigBox structures due to insufficient validation of user-supplied data length before copying into a fixed-size stack buffer, enabling arbitrary code ...

7.8CVSS7.7AI score0.00426EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago42 views

CVE-2026-5492

The DriveLock vulnerability CVE-2026-5492 affects the web service listening on TCP 4568. It stems from insufficient validation of a user-supplied path, enabling a directory traversal that can disclose information in the context of the service account. Exploitation requires authentication and is d...

6.5CVSS6.6AI score0.016EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago53 views

CVE-2026-5491

DriveLock exposes a directory-traversal information disclosure via its web service (default port 6067). The flaw is insufficient validation of user-supplied paths used in file operations, allowing remote, unauthenticated access to sensitive information in the service account’s context. Concrete r...

7.5CVSS7.1AI score0.01539EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago45 views

CVE-2026-5490

CVE-2026-5490 involves DriveLock where the web service (listening on TCP 4568 by default) constructs SQL queries from unvalidated user input, leading to a SQL Injection that can escalate privileges. The vulnerability is network-accessible and requires authentication to exploit, with impact descri...

8.8CVSS7.4AI score0.00481EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago62 views

CVE-2026-5489

CVE-2026-5489 concerns the DriveLock web service, which listens on TCP port 4568 by default. The flaw stems from insufficient validation of a user-supplied path used in file operations, allowing a remote attacker to disclose sensitive information in the context of the service account. The impact ...

5.3CVSS6AI score0.01266EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago69 views

CVE-2026-5487

The CVE describes a directory traversal in DriveLock’s web service (default port 4568). The vulnerability arises from improper validation of a user-supplied path before file operations, allowing an attacker to disclose sensitive information in the service account context without authentication. T...

7.5CVSS7.1AI score0.01535EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago15 views

CVE-2026-6102

The CVE-2026-6102 entry concerns MSI Center NTIOLib_X64 with a local privilege-escalation flaw in the NTIOLib_X64.sys driver due to insufficient validation of the origin of commands. A local attacker who can run low-privileged code can escalate to SYSTEM and execute arbitrary code. The issue is i...

7.8CVSS7.5AI score0.00086EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago17 views

CVE-2026-13268

The CVE concerns G DATA Total Security, specifically the Backup Service. A flaw allows local attackers to escalate privileges by abusing the service via creating a symbolic link to delete a file, enabling arbitrary code execution in the context of SYSTEM. This aligns with the ZDI advisory referen...

7.8CVSS7.5AI score0.00151EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago9 views

CVE-2026-63118

The MCP Ruby SDK (mcp gem) contains a DNS rebind vulnerability in MCP::Server::Transports::StreamableHTTPTransport where HTTP Host/Origin are not validated. This allows a malicious page to bind a victim’s locally running MCP server to a loopback/ LAN address and post JSON‑RPC requests to exposed ...

6.9CVSS5.9AI score0.00198EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago9 views

CVE-2026-18266

CVE-2026-18266 affects Dify AI Workflow via the OAuth flow in the AppInitializer component, enabling an Open Redirect vulnerability. An attacker can coerce a user to visit a malicious page or file, resulting in a redirection to a site of the attacker’s choosing and potential information disclosur...

5.4CVSS5.9AI score0.00243EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago17 views

CVE-2026-12357

The CVE-2026-12357 entry concerns Heimdall Data Database Proxy. The connected PT-2026-64200 source describes a CRLF injection in the generateFileContent() function, leading to remote code execution with root privileges. The vulnerability allows remote authenticated attackers to execute arbitrary ...

7.2CVSS7.6AI score0.01089EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago71 views

CVE-2025-14562

CVE-2025-14562 affects GitLab CE/EE; versions 10.6–19.0.4, 19.1.x before 19.1.3, and 19.2.x before 19.2.1 are impacted. An authenticated user with developer permissions could commit changes to a project after removal due to improper authorization checks on merge request collaboration settings. Gi...

3.1CVSS5.9AI score0.00225EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago62 views

CVE-2026-3093

GitLab CE/EE contains a Cross-site Scripting (XSS) flaw (CVE-2026-3093) caused by improper sanitization of user-controlled input during web page generation. Affected versions are 14.0 up to 19.0.4, 19.1 up to 19.1.2, and 19.2 up to 19.2.0. Under certain conditions, an attacker could trigger arbit...

4.7CVSS6.2AI score0.00238EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago61 views

CVE-2026-4672

GitLab CVE-2026-4672 affects GitLab CE/EE: 18.4.x before 19.0.5, 19.1.x before 19.1.3, and 19.2.x before 19.2.1. An authenticated user with guest permissions could access test report contents they were not authorized to view due to improper access control enforcement. The issue has been remediate...

4.3CVSS5.9AI score0.00243EPSS
SaveExploits0References3
CVE
CVE
added 5 days ago59 views

CVE-2026-6267

CVE-2026-6267 affects GitLab CE/EE. Affected versions: all 10.1.0 up to but not including 19.0.5, 19.1 up to but not including 19.1.3, and 19.2 up to but not including 19.2.1. Under certain conditions, an authenticated user with the Developer role could access unauthorized information due to insu...

8.5CVSS5.9AI score0.00337EPSS
SaveExploits0References3
Total number of security vulnerabilities378128