Lucene search
+L

434587 matches found

EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58672

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...

7.3CVSS5.7AI score0.00099EPSS
SaveExploits0References1
EUVD
EUVD
added 5 days ago6 views

EUVD-2026-58671

A vulnerability was determined in Webkul Bagisto up to 2.4.4. Affected is an unknown function of the file /admin/customers/login-as-customer/ of the component Admin Customer Impersonation Feature. This manipulation of the argument ID causes authorization bypass. The attack can be initiated...

5.8CVSS5.1AI score0.00309EPSS
SaveExploits0References5
EUVD
EUVD
added 5 days ago6 views

EUVD-2026-58670

A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The writeString method performs a silent narrowing cast from 16-bit Unicode characters to 8-bit bytes when writing HTTP response header values. A remote attacker can exploit this by supplying specific...

5.3CVSS5.6AI score0.00235EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58669

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

6.5CVSS5.3AI score0.00405EPSS
SaveExploits0References4
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-58668

Datavane TIS v5.0.0 contains an XML external entity XXE injection vulnerability that allows authenticated attackers to perform server-side request forgery and out-of-band file exfiltration by supplying a crafted taskScript payload to the doEditWorkflow endpoint, which processes XML through an...

8.3CVSS5.4AI score0.0034EPSS
SaveExploits0References4
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58667

Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...

6.3CVSS5.3AI score0.00331EPSS
SaveExploits0References1
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58666

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...

5.3CVSS5.2AI score0.00286EPSS
SaveExploits0References1
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58665

Use of Hard-coded Credentials in the human resources component in Roskus Prospero Flow CRM before 5.15.9 allows unauthenticated remote attackers to authenticate as any employee onboarded through the standard flow, knowing only their email address, because the employee save controller falls back t...

9.3CVSS5.4AI score0.00386EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58664

A flaw was found in migration-planner. Insufficient validation of the AgentStatusUpdate.CredentialUrl field allows an authenticated attacker to store a malicious javascript: URL. When a victim views this URL in the Hybrid Cloud Console, it can lead to Cross-Site Scripting XSS, enabling script...

6.3CVSS5.6AI score0.00248EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-58663

A vulnerability was found in TRENDnet TEW-816DRM GURNC4.OT182B-C-TN-R1B028-US.EN. This impacts an unknown function of the file /etc/bftpd.conf of the component bftpd. The manipulation of the argument USERLIMITGLOBAL results in allocation of resources. It is possible to launch the attack remotely...

6.9CVSS5.5AI score0.00474EPSS
SaveExploits0References5
EUVD
EUVD
added 5 days ago14 views

EUVD-2026-58662

Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate actions from a JSON request body, the plugin reads that body into memory without bounding how much it will accept, so a single request can exhaust the heap and deny...

7.5CVSS5.4AI score0.00324EPSS
SaveExploits2References1
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58661

Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...

8.1CVSS5.7AI score0.00278EPSS
SaveExploits0References1
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58660

A security flaw has been discovered in 648540858 wvp-GB28181-pro 2.7.4-20260107. This vulnerability affects unknown code of the file LogController.java of the component Log File Download Endpoint. The manipulation of the argument fileName results in path traversal. The attack may be launched...

5.3CVSS5AI score0.00365EPSS
SaveExploits0References6
EUVD
EUVD
added 5 days ago10 views

EUVD-2026-58659

A vulnerability was identified in 648540858 wvp-GB28181-pro 2.7.4-20260107. This affects an unknown part of the file PlayController.java of the component Snapshot Endpoint. The manipulation of the argument deviceId/channelId leads to path traversal. The attack may be initiated remotely. The explo...

6.5CVSS6.2AI score0.00288EPSS
SaveExploits0References6
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58658

A flaw has been found in alldatacenter alldata up to 0.6.8. This impacts the function FileInputStream of the file /admin/controller/JobLogController.java of the component logDetailCat Endpoint. This manipulation of the argument executorAddress causes path traversal. It is possible to initiate the...

6.9CVSS5.4AI score0.00479EPSS
SaveExploits0References6
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58657

A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function Hessian2Input.readObject of the file /serialize/impl/HessianSerializer.java of the component xxl-rpc Listener. The manipulation results in deserialization. The attack may be performed from remote. The...

7.5CVSS5.1AI score0.00328EPSS
SaveExploits0References6
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58656

A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=saveservice. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotel...

7.5CVSS5.4AI score0.00412EPSS
SaveExploits0References6
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58655

A weakness has been identified in Tenda W20E 15.11.0.610681546841CNTDC. The affected element is the function ipMacBindListStore of the file /goform/addIpMacBind. Executing a manipulation of the argument IPMacBindRule can lead to stack-based buffer overflow. The attack can be executed remotely. Th...

9CVSS6.3AI score0.00466EPSS
SaveExploits0References6
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58623

Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability that allows unauthenticated attackers to submit unsigned firmware images by exploiting a missing authentication enforcement flaw in the Boa web server and netis.cgi CGI dispatcher. Attackers can send ...

8.8CVSS5.5AI score0.00545EPSS
SaveExploits0References5
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58622

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formQOSRuleDel of the file /goform/delQos of the component QoS Rule Deletion. Performing a manipulation of the argument qosIndex results in stack-based buffer overflow. Remote exploitation of the...

9CVSS6AI score0.00466EPSS
SaveExploits0References6
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58621

Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...

8.6CVSS5.3AI score0.00282EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-58620

SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and is reachable anonymously. The endpoint never sets a failure code, so its outcome is signalled entirely by the response message and...

6.9CVSS5.5AI score0.00205EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-58619

actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers. Unauthenticated remote attackers can exploit this through a front-end intermediary to desynchronize backe...

6.3CVSS5.6AI score0.00335EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago12 views

EUVD-2026-58618

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getAttributeViewBacklinks endpoint that consults the forbidden access list instead of the visibility list when filtering backlinks. Anonymous readers can supply a publicly visible database row identifier to...

6.9CVSS5.3AI score0.00194EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58654

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getRefIDsByFileAnnotationID endpoint that returns block identifiers citing PDF annotations without publish-access filtering. Attackers can extract block identifiers from restricted documents by supplying annotati...

6.9CVSS5.3AI score0.00194EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago6 views

EUVD-2026-58653

Budibase versions 3.39.4 before 3.40.0 contain an authorization regression in the S3 attachment upload endpoint that allows BASIC users to obtain S3 PutObject presigned URLs by sending POST requests to the attachments endpoint. The route was changed from a BUILDER permission check to a TABLE/WRIT...

8.3CVSS5.6AI score0.00181EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58652

FileBrowser versions before 2.63.19 fail to enforce the declared Upload-Length in the TUS resumable-upload PATCH endpoint, allowing authenticated users to write arbitrary data to disk. Attackers can send oversized request bodies that exceed the declared upload length to exhaust available disk spa...

7.1CVSS5.6AI score0.00295EPSS
SaveExploits0References3
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58651

File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated credentials can read, modify, delete, and share files belonging to other users by exploiting the server root scope...

8.8CVSS5.4AI score0.003EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-58650

FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration. When Signup and CreateUserDir are enabled and FileBrowser's root is on a case-insensitive filesystem confirmed on Windows/NTFS, two self-registered usernam...

9.2CVSS5.3AI score0.00321EPSS
SaveExploits0References3
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58649

filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths. Attackers can request files with alternate path representations that match no ru...

7.6CVSS5.3AI score0.00338EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-58648

filebrowser before 2.63.19 contains a permission bypass in the /api/resources endpoint. The checksum ?checksum= branch of resourceGetHandler reads the entire file to compute a digest and returns it without performing a Perm.Download check unlike the sibling raw, preview, and subtitle paths. As a...

5.3CVSS5.4AI score0.00228EPSS
SaveExploits0References3
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58647

The Grav API plugin getgrav/grav-plugin-api versions = 1.0.6 and = 1.0.11 contain a privilege escalation vulnerability. A scoped API key minted on a super-admin account bypasses its declared scope cap on four isSuperAdmin-gated write endpoints in GroupsController, AccountsConfigController,...

8.8CVSS5.6AI score0.00261EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58646

Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. The event-handler scan is anchored at ?, which cannot cross the first literal ; when a appears inside a quoted attribute value the...

5.4CVSS4.6AI score0.0018EPSS
SaveExploits0References3
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58645

The Flex Objects plugin through 1.4.6, tested with Grav 2.0.11 contains an incorrect authorization vulnerability in its Flex Objects API. FlexApiController::update checks only the general Flex directory permission and does not apply the additional target/field/super-admin checks enforced by the...

8.8CVSS5.3AI score0.00302EPSS
SaveExploits0References6
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-58644

Grav API plugin versions before 1.0.13 fail to enforce API key scope caps in ConfigController super-scope gates, allowing scoped keys to write scheduler configuration. Attackers with a scoped api.config.write key can inject arbitrary commands into scheduler.customjobs that execute via Symfony...

9.8CVSS6.1AI score0.0044EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago10 views

EUVD-2026-58643

The Grav API plugin getgrav/grav-plugin-api before 1.0.13 contains an API-key scope-cap bypass in UsersController's create and update methods. These methods enforce the scope cap only for api.users.write, but gate super-privilege grants on a bare isSuperAdmin check that reads access.api.super...

9.8CVSS5.4AI score0.00302EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-58641

Grav CMS before 2.0.13 contains a server-side template injection vulnerability in email-action parameters that allows low-privileged page editors to execute arbitrary operating-system commands. Attackers can inject Twig payloads using the unsandboxed find filter in email subject, body, to, or fro...

8.8CVSS6.7AI score0.00473EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-58642

Grav Plugin API getgrav/grav-plugin-api before 1.0.13 fails to enforce API-key scope caps in InvitationsController. The strip-super and accept-groups decisions are gated on a bare isSuperAdmin check rather than a scope-aware permission check, so a least-privilege API key scoped to api.users.write...

8.6CVSS5.4AI score0.00272EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58640

The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of the caller's scopes in createApiKey. The self-target path of requireApiKeyPermission requires only the baseline api.access scope, and the new key's scopes are read directl...

9.8CVSS5.5AI score0.00302EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58638

The Grav API plugin getgrav/grav-plugin-api before 1.0.13 contains an API key scope-cap bypass in PagesController::guardTwigContent. The Twig-toggle check uses a bare isSuperAdmin gate that does not consult apikeyscopes, so a least-privilege API key scoped only to api.pages.write and minted on a...

9.8CVSS6.1AI score0.00467EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58639

The getgrav/grav-plugin-api plugin before 1.0.13 contains an API-key scope cap bypass in the POST /reports/twig-content/allowlist endpoint ReportsController. The endpoint enforces requirePermission'api.config.write' followed by a bare isSuperAdmin check instead of requireSuper. Because isSuperAdm...

7.6CVSS5.5AI score0.00199EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58637

The Grav API plugin getgrav/grav-plugin-api before 1.0.13 contains an API-key scope cap bypass in DemoController. Its private requireSuper method checks isSuperAdmin and returns early before invoking requirePermission, so the apikeyscopes cap enforced only in requirePermission is skipped. As a...

5.4CVSS5.4AI score0.00193EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58636

The getgrav/grav-plugin-api Composer package before 1.0.13 affected = 1.0.12 fails to enforce API key scope caps on the disable2fa endpoint. Unlike the sibling generate2fa endpoint, disable2fa authorizes the admin non-self path solely via ACL reads isSuperAdmin/hasPermission and never invokes...

9.8CVSS5.5AI score0.00345EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58635

Grav Form plugin versions before 9.1.15 contain a stored cross-site scripting vulnerability in radio and toggle field option labels rendered with the Twig |raw filter. Attackers with form authoring permissions can inject HTML and script payloads in option labels that execute in the browsers of...

5.4CVSS5AI score0.00138EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58634

Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAVROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from...

6.9CVSS5.4AI score0.00339EPSS
SaveExploits0References3
EUVD
EUVD
added 5 days ago6 views

EUVD-2026-58633

Grav CMS before 2.0.13 contains a remote code execution vulnerability in the Flex Objects plugin settings validation that allows authenticated users to execute arbitrary code by uploading a ZIP file containing PHP code. Attackers can bypass routine name validation by using array notation instead ...

8.8CVSS6.9AI score0.00502EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58631

go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware middleware/realip.go. The realIP function reads client-controlled headers True-Client-IP, X-Real-IP, and X-Forwarded-For and overwrites r.RemoteAddr without verifying that the request originated from a trusted...

6.9CVSS5.7AI score0.00219EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-58632

go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP Request.RemoteAddr using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the fir...

6.9CVSS5.4AI score0.0015EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago7 views

EUVD-2026-58630

go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log...

6.9CVSS5.5AI score0.00397EPSS
SaveExploits0References2
EUVD
EUVD
added 5 days ago8 views

EUVD-2026-58628

actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files. When panic is set to abort, remote attackers can crash the process on-demand by sending a GET request with an empty Range header...

6.9CVSS5.5AI score0.00394EPSS
SaveExploits0References2
Total number of security vulnerabilities434587