Lucene search
+L
PtsecurityMost viewed

212496 matches found

Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•42 views

PT-2026-50692

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, AutoGPT's LoopVideoBLock allows users to input a video file and process the video, such as looping it 5 times or extending the time, and finally writing it t...

8.7CVSS5.3AI score0.00531EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•42 views

PT-2026-61798

Name of the Vulnerable Software and Affected Versions praisonai versions 4.5.110 through 4.6.58 Description SandlockSandbox is designed as a kernel-enforced sandbox for untrusted code, allowing configuration of allowed filesystem paths and network restrictions via SandboxConfig.native. However, o...

8.8CVSS5.2AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•42 views

PT-2026-50838

Name of the Vulnerable Software and Affected Versions Blocksy Companion versions prior to 2.1.46 Description The Blocksy Companion plugin for WordPress contains a Stored Cross-Site Scripting issue within the admin settings caused by insufficient input sanitization and output escaping. This allows...

4.4CVSS5.9AI score0.00335EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•42 views

PT-2026-50691

Name of the Vulnerable Software and Affected Versions Eclipse Theia versions prior to 1.71.0 Description Files matching the pattern .prompts/.prompttemplate in a workspace are automatically loaded, allowing them to override or extend the AI agent's system prompts. This enables indirect prompt...

8.8CVSS6AI score0.00507EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•42 views

PT-2026-50802

Name of the Vulnerable Software and Affected Versions M365 Copilot affected versions not specified Description A missing authentication flaw in a critical function allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no information about ...

9.8CVSS5.9AI score0.01084EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•42 views

PT-2026-50778

Name of the Vulnerable Software and Affected Versions Mojolicious::Sessions::Storable versions prior to 0.06 Description The software generates session IDs insecurely. The default session ID generator utilizes a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address o...

5.3CVSS5.9AI score0.00419EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50259

Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions prior to 3.4.2 Description A missing authorization check in the DataSource API allows unauthenticated users to expose arbitrary data source metadata. This occurs because the API does not require a login to acce...

9.8CVSS5.3AI score0.00655EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50486

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.6 Description A path traversal issue exists in the cache file serving endpoint '/cache/path:path' that allows authenticated users with the role of user or admin to read files from sibling directories outside th...

4.3CVSS5.9AI score0.00361EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50323

Unauthenticated Insecure Direct Object References IDOR in Salon booking system = 10.30.24 versions...

7.3CVSS5.3AI score0.00301EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50275

Subscriber Arbitrary File Upload in PT Luxa Addons = 1.2.2 versions...

9.9CVSS5.2AI score0.00447EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50548

REDMOND, WA -- In a bold move to streamline its communications and bypass the traditional tech press altogether, Microsoft announced Tuesday that all future Windows updates and software features will be unveiled exclusively via their corresponding Common Vulnerabilities and Exposures CVE numbers...

6.5AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50228

RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who logs in to the web console as an administrator...

8.6CVSS5.7AI score0.0248EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50388

Deserialization of Untrusted Data vulnerability in EMV Creatify allows Object Injection. This issue affects Creatify: from n/a through 1.5...

9.8CVSS5.2AI score0.00313EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50237

A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server...

9.8CVSS5.5AI score0.0038EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50401

Unauthenticated PHP Object Injection in SingleMalt = 1.5 versions...

8.1CVSS5.3AI score0.00436EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50484

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.6 Description Open WebUI allows users with permissions to create, update, or import workspace models to store arbitrary meta.knowledge entries without verifying ownership or read access to the referenced files...

7.1CVSS6AI score0.00325EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50573

Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.17.0 Description An unauthenticated issue exists in the chatbot builder tool where the endpoint "/api/blocks/file-input/v3/generate-upload-url" uses unsanitized fileName input to construct public S3 object keys. The...

9.3CVSS6AI score0.00407EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50262

Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This issue affects Apache DolphinScheduler versions prior to 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes this issue...

4.9CVSS5AI score0.00539EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•42 views

PT-2026-50549

Name of the Vulnerable Software and Affected Versions AWS Bedrock AgentCore Python SDK versions 1.1.3 through 1.6.0 Description Improper neutralization of argument delimiters in the install packages method of the Code Interpreter client allows a remote authenticated user to execute arbitrary...

8.4CVSS6.3AI score0.00342EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49935

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue exists in the Security Framework component of the Oracle WebCenter Portal product of Oracle Fusion Middleware. A low privileged attacker...

9.9CVSS5.8AI score0.00432EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49909

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory version 12.2.1.4.0 Oracle Unified Directory version 14.1.2.1.0 Description An issue in the OUD Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via LDAP to compromise th...

8.6CVSS5.9AI score0.00371EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49603

Name of the Vulnerable Software and Affected Versions Zyxel GS1900-48HPv2 versions prior to 2.90ABTQ.1C0 Description A stack-based buffer overflow exists in the CGI program. This flaw allows an unauthenticated attacker on the local area network LAN to potentially execute operating system commands...

8.8CVSS5.8AI score0.02501EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49999

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 Description An issue in the Human Resources component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can...

9.1CVSS5.9AI score0.00425EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49996

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM Siebel Apps - Marketing versions 17.0 through 26.5 Description An issue in the Marketing component of Oracle Siebel CRM allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...

9.8CVSS5.8AI score0.00508EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-50070

Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

8.8CVSS5.3AI score0.00432EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49931

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites version 12.2.1.4.0 Oracle WebCenter Sites version 14.1.2.0.0 Description An issue in the Oracle WebCenter Sites component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to...

10CVSS5.8AI score0.00508EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49969

Name of the Vulnerable Software and Affected Versions MySQL NDB Cluster versions 8.0.11 through 8.0.46 MySQL NDB Cluster versions 8.4.0 through 8.4.9 MySQL NDB Cluster versions 9.0.0 through 9.7.0 Description An issue exists in the NDB Operator component of MySQL NDB Cluster. A low-privileged...

9.6CVSS5.9AI score0.00362EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-50045

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle iSupport versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle iSupport product. A high privileged attacker with network access via HTTP can exploit this...

9.1CVSS5.8AI score0.00486EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49730

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.12.2 Description A flaw in the pure-python PDF library allows an attacker to craft a PDF that causes excessive memory consumption. This occurs when extracting text from a page containing a form XObject a reusable PDF...

8.7CVSS5.9AI score0.0062EPSS
SaveExploits1References79
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49937

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle WebCenter Content within Oracle Fusion Middleware. A low-privileged attacker with network access via HTTP can compromise the...

8.7CVSS5.9AI score0.00326EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-50021

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description An issue exists in the Filesystem component of Oracle Solaris. A low-privileged attacker with logon access to the infrastructure where the system executes can compromise the environment. Successful...

7.1CVSS5.9AI score0.00156EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-50120

Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and prior, a high-severity Zip Slip vulnerability was identified in Streambert's subtitle extraction logic. The application does not sanitize archive entry filenames during extraction,...

10CVSS5.5AI score0.00987EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49907

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0 Description An issue in the OUD Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via LDAP Lightweight...

9.8CVSS5.8AI score0.00508EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49653

A format string vulnerability has been found in the "alias" parameter of the Serial Param configuration page in the NPort W2150A-W4/W2250A-W4 Series version 1.5 and prior. This vulnerability stems from insufficient input validation and improper handling of externally supplied format strings. An...

6.9CVSS5.3AI score0.0031EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-50036

Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

7.1CVSS5.1AI score0.00376EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•42 views

PT-2026-49853

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PT PeopleTools version 8.61 PeopleSoft Enterprise PT PeopleTools version 8.62 Description An issue exists in the Performance Monitor component of Oracle PeopleSoft. This flaw allows an unauthenticated attacker with networ...

8.1CVSS5.8AI score0.00392EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•42 views

PT-2026-49532

Name of the Vulnerable Software and Affected Versions elixir-grpc versions 0.8.0 through 0.9.x Description Authenticated attackers can access or modify resources belonging to other users by smuggling a conflicting value for any path-bound field via the query string or request body. This occurs in...

7.6CVSS5.3AI score0.00339EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•42 views

PT-2026-49224

WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download sensitive backup files by accessing the download backup.php endpoint. Attackers can directly access the download backup.php script in the admin/data management...

8.7CVSS5.2AI score0.00287EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•42 views

PT-2026-49345

Name of the Vulnerable Software and Affected Versions Welcart e-Commerce versions prior to 2.11.29 Description Unauthenticated broken access control allows unauthorized users to bypass security restrictions. Recommendations Update to a version newer than 2.11.28...

6.5CVSS5.2AI score0.00332EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•42 views

PT-2026-49195

Name of the Vulnerable Software and Affected Versions Wertheim SafeController Software version 6.15.8328.28014 Description Missing authorization checks on multiple web application endpoints allow an authenticated attacker with minimal privileges to access hidden endpoints. This enables the...

8.6CVSS5.6AI score0.00396EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•42 views

PT-2026-49229

Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows Retrieve Embedded Sensitive Data. This issue affects GetPaid: from n/a through 2.8.49...

7.5CVSS5.2AI score0.00416EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•42 views

PT-2026-49579

Name of the Vulnerable Software and Affected Versions Electron versions 42.3.1 through 42.3.2 Description Incorrect byte length calculations in the Node.js Buffer API cause heap underflow or overflow, which can lead to memory corruption or application crashes. This issue may result in incorrect...

9.3CVSS5.6AI score0.00428EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•42 views

PT-2026-49298

Name of the Vulnerable Software and Affected Versions RuoYi version 4.8.2 Description An issue in the code generation module allows an authenticated attacker with administrative privileges to access sensitive database information. This is possible through a SQL Injection in the...

9.8CVSS6AI score0.00468EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•42 views

PT-2026-49212

WordPress Lazy Content Slider Plugin 3.4 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by crafting malicious HTML forms. Attackers can trick authenticated administrators into submitting POST requests to the plugin settings page via lzcs...

5.3CVSS5.1AI score0.00103EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•42 views

PT-2026-49181

Name of the Vulnerable Software and Affected Versions Yealink SIP-T46U version 108.86.0.118 Description A stack-based buffer overflow exists in the Firmware Chunk Upload handler. This occurs when the uid argument is manipulated within the mod upgrade.SparePartsUpload function of the...

8.6CVSS7.6AI score0.00371EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•42 views

PT-2026-49556

Name of the Vulnerable Software and Affected Versions @babel/core versions prior to 7.29.6 @babel/core versions prior to 8.0.0-rc.6 Description Compiling maliciously crafted code using @babel/core can allow an attacker to read any source map from the system. This occurs when the attacker controls...

3.6CVSS5.9AI score0.00152EPSS
SaveExploits0References55
Positive Technologies
Positive Technologies
•added 2026/06/13 12:00 a.m.•42 views

PT-2026-49077

Name of the Vulnerable Software and Affected Versions WP Ticket versions prior to 6.0.5 Description The WP Ticket plugin for WordPress allows unauthenticated attackers to extract sensitive information from the database. The issue occurs during unauthenticated front-end searches when the plugin...

7.5CVSS5.5AI score0.00554EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2026/06/13 12:00 a.m.•42 views

PT-2026-49119

Name of the Vulnerable Software and Affected Versions Tornado versions prior to 6.5.6 Description Gzip decompression routines process data in limited-size chunks but lack an overall limit for the total size of accumulated decompressed chunks. This allows a malicious server to consume unlimited...

7.7CVSS5.9AI score0.00609EPSS
SaveExploits0References55
Positive Technologies
Positive Technologies
•added 2026/06/12 12:00 a.m.•42 views

PT-2026-48857

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...

7CVSS5.2AI score0.00085EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/12 12:00 a.m.•42 views

PT-2026-49001

Name of the Vulnerable Software and Affected Versions Nezha Monitoring versions prior to 2.0.13 Description The dashboard's NoRoute handler contains a flaw in the fallbackToFrontend function. The system uses strings.HasPrefix to identify admin-frontend asset requests by checking if a URL starts...

9.1CVSS5.2AI score0.02286EPSS
SaveExploits2
Total number of security vulnerabilities5000