Lucene search
+L
PtsecurityMost viewed

212496 matches found

Positive Technologies
Positive Technologies
•added 2026/06/22 12:00 a.m.•41 views

PT-2026-51386

Name of the Vulnerable Software and Affected Versions mise versions prior to 2026.3.10 Description mise processes .tool-versions files using the Tera template engine, which includes a registered exec function that allows for arbitrary command execution. In the default non-paranoid mode,...

9.6CVSS6AI score0.00685EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/06/21 12:00 a.m.•41 views

PT-2026-51236

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.6.1 Description SiYuan fails to sanitize package metadata and README content within the Bazaar marketplace. This allows malicious authors to inject arbitrary HTML and JavaScript into the displayName, description, or...

9.6CVSS6.7AI score0.007EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/06/21 12:00 a.m.•41 views

PT-2026-51219

Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and build credentials operations that follow symlinks without validation. Attackers can create malicious symlinks in repositories to overwrite arbitrary files or expose credentials with world-readable permissions...

6.8CVSS6AI score0.00183EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/21 12:00 a.m.•41 views

PT-2026-51210

Name of the Vulnerable Software and Affected Versions BerriAI litellm versions prior to 1.82.3 Description An issue exists in the SSO Authentication Flow component within the get redirect response from openid function of the litellm/proxy/management endpoints/ui sso.py file. Remote manipulation o...

6.5CVSS6.6AI score0.0057EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2026/06/20 12:00 a.m.•41 views

PT-2026-51190

Name of the Vulnerable Software and Affected Versions AOMEI Backupper versions prior to 8.3.0 Description An issue exists in the Kernel Driver component within the amwrtdrv.sys library. A local attacker can perform a manipulation of an unknown function to cause improper access controls...

8.5CVSS7AI score0.00162EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/06/20 12:00 a.m.•41 views

PT-2026-51151

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.2 Description A mass assignment issue exists in the 'PUT /api/v1/user' endpoint. This allows authenticated users to modify the credential field without proper validation. By providing a crafted password hash, an...

6CVSS5.9AI score0.00366EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•41 views

PT-2026-50870

Name of the Vulnerable Software and Affected Versions Cloudflare Quiche versions prior to 0.29.2 Description Two use-after-free issues exist in the connection ID iterator FFI Foreign Function Interface functions. The functions quiche connection id iter next and quiche conn retired scid next retur...

5.6CVSS5.8AI score0.00251EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•41 views

PT-2026-50837

Name of the Vulnerable Software and Affected Versions BetterDocs - Knowledge Base Docs & FAQ Solution for Elementor & Block Editor versions prior to 4.5.4 Description Stored Cross-Site Scripting occurs via the blockId attribute of the 'betterdocs/category-slate-layout' Gutenberg block. The issue...

6.4CVSS6AI score0.00349EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•41 views

PT-2026-50908

Name of the Vulnerable Software and Affected Versions Comodo Dragon Browser versions prior to 52.15.25.664 Description The DragonUpdater service contains a privilege escalation flaw caused by an unquoted service path that runs with SYSTEM privileges. A local attacker can exploit this by placing a...

8.5CVSS6.2AI score0.00175EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•41 views

PT-2026-51079

Name of the Vulnerable Software and Affected Versions CoreWCF versions prior to 1.8.1 CoreWCF versions prior to 1.9.1 Description SAML 1.1 and SAML 2.0 token validation fails to correctly resolve the issuer signing key or enforce signed tokens when IdentityConfiguration is used with federated...

10CVSS6AI score0.00414EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•41 views

PT-2026-50965

Name of the Vulnerable Software and Affected Versions PhpWeasyPrint versions prior to 2.5.1 Description PhpWeasyPrint is a PHP library used for generating PDFs from HTML pages or URLs. The software contains a shell command injection flaw occurring when the binary path for WeasyPrint is processed...

8.2CVSS5.9AI score0.00225EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•41 views

PT-2026-51050

Name of the Vulnerable Software and Affected Versions Symfony UX Live Component versions prior to 2.x Symfony UX Live Component versions prior to 3.x Description The BatchActionController:: invoke function iterates over a client-supplied actions array and issues a full HttpKernel sub-request for...

5.3CVSS5.9AI score0.0056EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•41 views

PT-2026-50951

Name of the Vulnerable Software and Affected Versions Joomla! Component Twitch Tv version 1.1 Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries. This is achieved by injecting malicious code through the username and id parameters. Attackers can send GET...

8.8CVSS6.2AI score0.00492EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•41 views

PT-2026-50834

Name of the Vulnerable Software and Affected Versions WP DSGVO Tools GDPR versions prior to 3.1.40 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Unauthenticated attackers can provide an arbitrary victim...

5.3CVSS6AI score0.00579EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•41 views

PT-2026-50830

Name of the Vulnerable Software and Affected Versions Classified Listing – Classified ads & Business Directory versions prior to 5.4.3 Description The plugin contains a missing authorization flaw in the gallery image update as feature AJAX handler action: rtcl fb gallery image update as feature...

4.3CVSS5.9AI score0.00371EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•41 views

PT-2026-50806

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.128 Description An arbitrary shell command execution issue exists where UI modules hardcode approval mode to auto, which overrides the administrator configuration set in the PRAISON APPROVAL MODE environment...

8.8CVSS6.3AI score0.00707EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•41 views

PT-2026-50692

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.63, AutoGPT's LoopVideoBLock allows users to input a video file and process the video, such as looping it 5 times or extending the time, and finally writing it t...

8.7CVSS5.3AI score0.00531EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•41 views

PT-2026-50674

Name of the Vulnerable Software and Affected Versions Docker Sandboxes sbx affected versions not specified Description Docker Sandboxes sbx implements an egress allowlist restricted to HTTP/S traffic but fails to apply this restriction to DNS resolution. The embedded DNS server for each network...

5.7CVSS5.8AI score0.00103EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•41 views

PT-2026-50714

Name of the Vulnerable Software and Affected Versions WP EasyPay versions prior to 4.4.0 Description Cross-Site Request Forgery CSRF allows an attacker to induce a user to perform actions they did not intend to do by tricking their browser into sending a forged request to the application...

6.5CVSS5.9AI score0.00176EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•41 views

PT-2026-50778

Name of the Vulnerable Software and Affected Versions Mojolicious::Sessions::Storable versions prior to 0.06 Description The software generates session IDs insecurely. The default session ID generator utilizes a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address o...

5.3CVSS5.9AI score0.00419EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•41 views

PT-2026-50794

Name of the Vulnerable Software and Affected Versions conda-smithy versions prior to 3.61.0 Description conda-smithy is a tool that combines a conda recipe with configurations to build using freely hosted CI services into a single repository. A flaw in the conda-forge automated webservices allows...

7.6CVSS5.8AI score0.0033EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•41 views

PT-2026-50691

Name of the Vulnerable Software and Affected Versions Eclipse Theia versions prior to 1.71.0 Description Files matching the pattern .prompts/.prompttemplate in a workspace are automatically loaded, allowing them to override or extend the AI agent's system prompts. This enables indirect prompt...

8.8CVSS6AI score0.00507EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50296

Unauthenticated Broken Access Control in MetForm Pro = 3.9.1 versions...

9.1CVSS5.2AI score0.00437EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50256

Name of the Vulnerable Software and Affected Versions Regesta Smart HD-PLC - TLDPH16D2 version 11.02.05.10.02 Description A network attacker can obtain privileged information without requiring registration. This information disclosure occurs by using the Version command through the endpoint...

6.9CVSS5.9AI score0.00524EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50557

Name of the Vulnerable Software and Affected Versions marimo versions prior to 0.23.9 Description A reflected cross-site scripting issue exists in the notebook page. Unauthenticated attackers can inject arbitrary JavaScript by exploiting improper escaping of single quotes in the file query...

6.1CVSS5.1AI score0.00395EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50595

Name of the Vulnerable Software and Affected Versions Daytona versions 0.101.0 through 0.184.0 Description A cross-tenant authorization flaw exists in the notification WebSocket gateway of the Daytona API service apps/api NestJS application. The JWT handshake joins a client-supplied organization...

6.5CVSS5.8AI score0.00456EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50401

Unauthenticated PHP Object Injection in SingleMalt = 1.5 versions...

8.1CVSS5.3AI score0.00436EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50320

Subscriber Arbitrary File Upload in Charity Zone = 1.1.1 versions...

9.9CVSS5.2AI score0.00479EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50410

Name of the Vulnerable Software and Affected Versions Apache Shiro versions prior to 2.2.1 Apache Shiro versions prior to 3.0.0-alpha-2 Description A remote attacker can inject LDAP special characters into the Distinguished Name DN construction within the DefaultLdapRealm class. User-supplied...

9.1CVSS5.3AI score0.00755EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50491

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.23.1rc0 Description An incomplete fix for a previous memory leak issue allows unauthenticated attackers to leak heap memory addresses. The system fails to properly sanitize error messages in several response paths,...

5.3CVSS6.7AI score0.00927EPSS
SaveExploits1References15
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50513

Name of the Vulnerable Software and Affected Versions undici versions 7.23.0 through 8.1.0 Description When using Socks5ProxyAgent, the software reuses a single connection pool across different origins without verifying if the pool's origin matches the requested origin. This leads to cross-origin...

8.8CVSS5.8AI score0.00385EPSS
SaveExploits0References85
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50459

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Cisco ISE-PIC affected versions not specified Description Improper authorization checks when accessing a resource could allow an unauthenticated, remote attacker to view sensitive information on an...

7.8CVSS5.8AI score0.00504EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50210

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description Insufficient policy enforcement in File System Access allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site...

9.6CVSS5.9AI score0.00613EPSS
SaveExploits0References40
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50602

Name of the Vulnerable Software and Affected Versions Avo versions prior to 3.32.1 Avo versions prior to 4.0.0.beta.51 Description A missing authorization check in the association attach workflow allows authenticated low-privileged users to bypass UI restrictions and directly attach related recor...

9.6CVSS5.2AI score0.00448EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50244

Name of the Vulnerable Software and Affected Versions LearnPress versions prior to 4.3.7 Description An information disclosure issue exists where the edit context on a REST endpoint is not properly restricted by the edit users capability. This allows unauthenticated visitors to retrieve sensitive...

5.3CVSS5.8AI score0.00692EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/17 12:00 a.m.•41 views

PT-2026-50250

Got 2 CVEs today: CVE-2026-46655 - virtio-win kvm-guest-drivers - 7.8 High CVE-2026-46977 - Oracle VirtualBox - 3.2 Low...

3.2CVSS5.2AI score0.0018EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-49969

Name of the Vulnerable Software and Affected Versions MySQL NDB Cluster versions 8.0.11 through 8.0.46 MySQL NDB Cluster versions 8.4.0 through 8.4.9 MySQL NDB Cluster versions 9.0.0 through 9.7.0 Description An issue exists in the NDB Operator component of MySQL NDB Cluster. A low-privileged...

9.6CVSS5.9AI score0.00362EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-50054

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Person. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Human Resources. Successf...

7.5CVSS5.3AI score0.0017EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-49935

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue exists in the Security Framework component of the Oracle WebCenter Portal product of Oracle Fusion Middleware. A low privileged attacker...

9.9CVSS5.8AI score0.00432EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-49896

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of the Oracle WebCenter Content product within Oracle Fusion Middleware. A low privileged...

8.8CVSS5.8AI score0.00432EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-49762

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.6 Description A hook bypass issue exists where skill commands routed through a specific dispatch path skip the runBeforeToolCallHook coverage. This allows attackers to send skill commands through the affected...

4.3CVSS5.3AI score0.00312EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-49954

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal version 12.2.1.4.0 Oracle WebCenter Portal version 14.1.2.0.0 Description An issue in the Security Framework component of Oracle WebCenter Portal allows an unauthenticated attacker with network access via HTTP to...

10CVSS5.2AI score0.00508EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-50055

Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Property...

7.2CVSS5.2AI score0.00486EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-50053

Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: UK Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS UK. Successful attacks of...

7.2CVSS5.2AI score0.00486EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-49821

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Several functions within the RTCP packet decoder lack proper bounds checks, leading to a possible out-of-bounds read. This condition allows for remote informatio...

5.7CVSS6AI score0.0018EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-50175

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.25.7 n8n versions prior to 2.26.2 Description When @n8n/mcp-browser is operated in HTTP transport mode using the --transport http flag, the MCP endpoint allows session initialization and tool invocation requests without...

10CVSS5.9AI score0.00546EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-49928

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle WebCenter Content within Oracle Fusion Middleware. An unauthenticated attacker with network access via HTTP can compromise the...

9.3CVSS5.9AI score0.00383EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-49790

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An integer overflow in the decodePacket function of RtpPacket can lead to out-of-bounds access. This issue may allow a local escalation of privilege without...

7.3CVSS6AI score0.00072EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-49898

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Content Server component of Oracle WebCenter Content. A low privileged attacker with network access via HTTPS can...

7.6CVSS5.9AI score0.0027EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/06/16 12:00 a.m.•41 views

PT-2026-50057

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Subledger Accounting versions 12.2.3 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Subledger Accounting product. A low privileged attacker with network access via...

7.5CVSS5.9AI score0.00334EPSS
SaveExploits0References3
Total number of security vulnerabilities5000