Lucene search
+L
PtsecurityMost viewed

212496 matches found

Positive Technologies
Positive Technologies
•added 2026/06/22 12:00 a.m.•42 views

PT-2026-51271

Name of the Vulnerable Software and Affected Versions centraldogma-server versions prior to 0.84.0 Description Enabling ZooKeeper replication without configuring the replication.secret variable causes the server to silently use a hard-coded, publicly known secret. This default credential...

9.4CVSS6.2AI score0.00229EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/06/22 12:00 a.m.•42 views

PT-2026-51403

Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2 Description A denial of service issue exists in the 'POST /app/demo' endpoint. Authenticated users with organization write permissions can create an unlimited number of demo applications because the system lack...

5.3CVSS5.8AI score0.00373EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/22 12:00 a.m.•42 views

PT-2026-51461

Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.39.9 Description An issue exists where a workspace-level builder can read any file the server process has access to by uploading a specially crafted PWA zip file. The POST /api/pwa/process-zip endpoint extracts the...

9.6CVSS5.8AI score0.00494EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2026/06/21 12:00 a.m.•42 views

PT-2026-51213

Name of the Vulnerable Software and Affected Versions BerriAI litellm versions prior to 1.82.3 Description Improper authorization occurs in the ui view users function located in the litellm/proxy/management endpoints/internal user endpoints.py file. This flaw allows a remote attacker to bypass...

5.3CVSS6.2AI score0.00426EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2026/06/21 12:00 a.m.•42 views

PT-2026-51210

Name of the Vulnerable Software and Affected Versions BerriAI litellm versions prior to 1.82.3 Description An issue exists in the SSO Authentication Flow component within the get redirect response from openid function of the litellm/proxy/management endpoints/ui sso.py file. Remote manipulation o...

6.5CVSS6.6AI score0.0057EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2026/06/20 12:00 a.m.•42 views

PT-2026-51139

Name of the Vulnerable Software and Affected Versions WordPress Ultimate Addons for Beaver Builder version 1.2.4.1 Description An authentication bypass exists in the social media login form functionality. Attackers can gain unauthorized access by submitting a POST request to the 'admin-ajax.php'...

9.8CVSS5.9AI score0.008EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•42 views

PT-2026-51631

Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.14.3 Description Gogs contains a path traversal flaw where organization names containing relative path sequences e.g., ../ are accepted without proper sanitization. This occurs because the internal/database/org.go file...

10CVSS7.5AI score0.01107EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•42 views

PT-2026-50986

Name of the Vulnerable Software and Affected Versions Joomla Component J-MultipleHotelReservation version 6.0.7 Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code. This is achieved by sending POST requests to the...

8.8CVSS6.2AI score0.00492EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•42 views

PT-2026-51109

Name of the Vulnerable Software and Affected Versions openbao affected versions not specified openbao-agent affected versions not specified openbao-cassandra-database-plugin affected versions not specified openbao-influxdb-database-plugin affected versions not specified...

2.1CVSS8AI score0.00562EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•42 views

PT-2026-50870

Name of the Vulnerable Software and Affected Versions Cloudflare Quiche versions prior to 0.29.2 Description Two use-after-free issues exist in the connection ID iterator FFI Foreign Function Interface functions. The functions quiche connection id iter next and quiche conn retired scid next retur...

5.6CVSS5.8AI score0.00251EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•42 views

PT-2026-50867

AIL framework contains a path traversal vulnerability in the /objects/item/diff endpoint. The endpoint accepts item identifiers through the s1 and s2 query parameters and, prior to the fix, attempted to retrieve and compare item contents without first verifying that both referenced items existed ...

5.3CVSS5.8AI score0.0051EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•42 views

PT-2026-50914

Name of the Vulnerable Software and Affected Versions Network Inventory Advisor version 5.0.26.0 Description The niaservice service is installed with an unquoted binary path. This configuration allows local attackers to escalate privileges by placing malicious executables in intermediate...

8.5CVSS6.2AI score0.00175EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•42 views

PT-2026-50993

Name of the Vulnerable Software and Affected Versions Joomla vWishlist version 1.0.1 Description An SQL injection allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code. This is achieved by sending POST requests to the component using crafted payloads in the...

7.1CVSS6.1AI score0.00405EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•42 views

PT-2026-50965

Name of the Vulnerable Software and Affected Versions PhpWeasyPrint versions prior to 2.5.1 Description PhpWeasyPrint is a PHP library used for generating PDFs from HTML pages or URLs. The software contains a shell command injection flaw occurring when the binary path for WeasyPrint is processed...

8.2CVSS5.9AI score0.00225EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•42 views

PT-2026-50997

Name of the Vulnerable Software and Affected Versions JoomCRM version 1.1.1 Description An SQL injection allows authenticated attackers to execute arbitrary SQL queries. By sending GET requests to the 'index.php' endpoint with the parameters option=com joomcrm and view=contacts, attackers can...

7.1CVSS6AI score0.00405EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•42 views

PT-2026-50881

Name of the Vulnerable Software and Affected Versions FlexNet Manager Suite 2025 R1 Description An issue exists where an authenticated user with read-only access to account settings can escalate their privileges to the Administrator level. Recommendations At the moment, there is no information...

8.7CVSS5.8AI score0.00351EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•42 views

PT-2026-50834

Name of the Vulnerable Software and Affected Versions WP DSGVO Tools GDPR versions prior to 3.1.40 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Unauthenticated attackers can provide an arbitrary victim...

5.3CVSS6AI score0.00579EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•42 views

PT-2026-50782

Name of the Vulnerable Software and Affected Versions pam usb versions prior to 0.9.2 Description pam usb provides hardware authentication for Linux using removable media. The software calls the xmlReadFile function with flags=0 when loading the configuration file, which allows libxml2 to process...

6.7CVSS5.8AI score0.00154EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•42 views

PT-2026-50692

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, AutoGPT's LoopVideoBLock allows users to input a video file and process the video, such as looping it 5 times or extending the time, and finally writing it t...

8.7CVSS5.3AI score0.00531EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•42 views

PT-2026-50838

Name of the Vulnerable Software and Affected Versions Blocksy Companion versions prior to 2.1.46 Description The Blocksy Companion plugin for WordPress contains a Stored Cross-Site Scripting issue within the admin settings caused by insufficient input sanitization and output escaping. This allows...

4.4CVSS5.9AI score0.00335EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•42 views

PT-2026-50691

Name of the Vulnerable Software and Affected Versions Eclipse Theia versions prior to 1.71.0 Description Files matching the pattern .prompts/.prompttemplate in a workspace are automatically loaded, allowing them to override or extend the AI agent's system prompts. This enables indirect prompt...

8.8CVSS6AI score0.00507EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•42 views

PT-2026-50778

Name of the Vulnerable Software and Affected Versions Mojolicious::Sessions::Storable versions prior to 0.06 Description The software generates session IDs insecurely. The default session ID generator utilizes a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address o...

5.3CVSS5.9AI score0.00419EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50486

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.6 Description A path traversal issue exists in the cache file serving endpoint '/cache/path:path' that allows authenticated users with the role of user or admin to read files from sibling directories outside th...

4.3CVSS5.9AI score0.00361EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50323

Unauthenticated Insecure Direct Object References IDOR in Salon booking system = 10.30.24 versions...

7.3CVSS5.3AI score0.00301EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50275

Subscriber Arbitrary File Upload in PT Luxa Addons = 1.2.2 versions...

9.9CVSS5.2AI score0.00447EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50548

REDMOND, WA -- In a bold move to streamline its communications and bypass the traditional tech press altogether, Microsoft announced Tuesday that all future Windows updates and software features will be unveiled exclusively via their corresponding Common Vulnerabilities and Exposures CVE numbers...

6.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50228

RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who logs in to the web console as an administrator...

8.6CVSS5.7AI score0.0248EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50388

Deserialization of Untrusted Data vulnerability in EMV Creatify allows Object Injection. This issue affects Creatify: from n/a through 1.5...

9.8CVSS5.2AI score0.00313EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50237

A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server...

9.8CVSS5.5AI score0.0038EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50401

Unauthenticated PHP Object Injection in SingleMalt = 1.5 versions...

8.1CVSS5.3AI score0.00436EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50484

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.6 Description Open WebUI allows users with permissions to create, update, or import workspace models to store arbitrary meta.knowledge entries without verifying ownership or read access to the referenced files...

7.1CVSS6AI score0.00325EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50573

Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.17.0 Description An unauthenticated issue exists in the chatbot builder tool where the endpoint "/api/blocks/file-input/v3/generate-upload-url" uses unsanitized fileName input to construct public S3 object keys. The...

9.3CVSS6AI score0.00407EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50262

Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This issue affects Apache DolphinScheduler versions prior to 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes this issue...

4.9CVSS5AI score0.00539EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50549

Name of the Vulnerable Software and Affected Versions AWS Bedrock AgentCore Python SDK versions 1.1.3 through 1.6.0 Description Improper neutralization of argument delimiters in the install packages method of the Code Interpreter client allows a remote authenticated user to execute arbitrary...

8.4CVSS6.3AI score0.00342EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49935

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue exists in the Security Framework component of the Oracle WebCenter Portal product of Oracle Fusion Middleware. A low privileged attacker...

9.9CVSS5.8AI score0.00432EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49603

Name of the Vulnerable Software and Affected Versions Zyxel GS1900-48HPv2 versions prior to 2.90ABTQ.1C0 Description A stack-based buffer overflow exists in the CGI program. This flaw allows an unauthenticated attacker on the local area network LAN to potentially execute operating system commands...

8.8CVSS5.8AI score0.02501EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49999

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 Description An issue in the Human Resources component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can...

9.1CVSS5.9AI score0.00425EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49996

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.5 Description An issue in the Marketing component of Oracle Siebel CRM allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

9.8CVSS5.8AI score0.00508EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-50070

Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

8.8CVSS5.3AI score0.00432EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49931

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description An issue in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to...

10CVSS5.8AI score0.00508EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49969

Name of the Vulnerable Software and Affected Versions MySQL NDB Cluster versions 8.0.11 through 8.0.46 MySQL NDB Cluster versions 8.4.0 through 8.4.9 MySQL NDB Cluster versions 9.0.0 through 9.7.0 Description An issue exists in the NDB Operator component of MySQL NDB Cluster. A low-privileged...

9.6CVSS5.9AI score0.00362EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49821

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Several functions within the RTCP packet decoder lack proper bounds checks, leading to a possible out-of-bounds read. This condition allows for remote informatio...

5.7CVSS6AI score0.0018EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-50045

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle iSupport versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle iSupport product. A high privileged attacker with network access via HTTP can exploit this...

9.1CVSS5.8AI score0.00486EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49730

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.12.2 Description A flaw in the pure-python PDF library allows an attacker to craft a PDF that causes excessive memory consumption. This occurs when extracting text from a page containing a form XObject a reusable PDF...

8.7CVSS5.9AI score0.0062EPSS
SaveExploits1References79
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49937

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle WebCenter Content within Oracle Fusion Middleware. A low-privileged attacker with network access via HTTP can compromise the...

8.7CVSS5.9AI score0.00326EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-50021

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description An issue exists in the Filesystem component of Oracle Solaris. A low-privileged attacker with logon access to the infrastructure where the system executes can compromise the environment. Successful...

7.1CVSS5.9AI score0.00156EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-50120

Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and prior, a high-severity Zip Slip vulnerability was identified in Streambert's subtitle extraction logic. The application does not sanitize archive entry filenames during extraction,...

10CVSS5.5AI score0.00987EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49907

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description An issue in the OUD Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via LDAP Lightweight...

9.8CVSS5.8AI score0.00508EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49653

A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and prior. This vulnerability stems from insufficient input validation and improper handling of externally supplied format strings. An...

6.9CVSS5.3AI score0.0031EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-50036

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

7.1CVSS5.1AI score0.00376EPSS
SaveExploits0References2
Total number of security vulnerabilities5000