Lucene search
+L
PtsecurityRecent

200219 matches found

Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.6 views

PT-2026-71663

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...

8.6CVSS5.3AI score0.00343EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71627

rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intended destination subtree by sending a crafted file list that causes rsync to reclassify implied parent directory entries or treat synthetic...

7.1CVSS5.3AI score0.00311EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.2 views

PT-2026-71626

rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...

6.9CVSS5.3AI score0.00251EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71535

Unauthenticated Arbitrary Code Execution in WP BASE Booking = 6.3.0 versions...

10CVSS5.3AI score0.00476EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71636

rsync tbefore 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned by root by influencing name-converter responses to return empty values. When the name-converter subprocess returns a...

6.9CVSS5.2AI score0.00278EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.2 views

PT-2026-71896

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Pathological inputs can cause an unescaped '/' to close prematurely. This allows attack-controlled data to inject arbitrary content, which may lead to Cross-Site...

6.1CVSS5.5AI score0.00263EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.6 views

PT-2026-71907

Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export. Attackers can craft filenames containing .. segments that escape the temporary directory during workspace export, writing...

9.4CVSS5.4AI score0.00422EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.3 views

PT-2026-71568

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...

7.5CVSS5.2AI score0.00303EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.6 views

PT-2026-71531

Unauthenticated Cross Site Scripting XSS in Knowledge Base for Documentation, FAQs with AI Assistance = 17.211.0 versions...

7.1CVSS5.1AI score0.0018EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71431

Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to-speech endpoint, allowing attackers to abuse private chatflow TTS credentials. Unauthenticated attackers can generate unlimited text-to-speech audio using stored OpenAI or ElevenLabs API keys by providing a...

6.3CVSS5.3AI score0.00317EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.5 views

PT-2026-71550

Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.10 versions...

8.5CVSS5.7AI score0.00342EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71429

Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOM MCP PROTOCOL is set to stdio, allowing authenticated users to execute arbitrary commands by manipulating environment variables and command arguments. Attackers can abuse PYTHONWARNINGS a...

9CVSS6.5AI score0.00606EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71632

rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-alloc=0 to disable allocation sanity checks entirely rather than enforcing a zero-byte cap. Attackers can exploit this flaw to cause the receiver to attempt unbounded memory...

6.9CVSS5.2AI score0.00372EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.3 views

PT-2026-71453

GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check unsafe options guard that can be bypassed by smuggling git options inside single-character kwarg values. Attackers can supply crafted option dictionaries to clone from, fetch, pull, push, ls remote, iter...

8.8CVSS6.4AI score0.00502EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.2 views

PT-2026-71452

GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs. Attackers can supply the --output argument via the other parameter or output kwarg to write patch content to attacker-chosen fil...

8.1CVSS5.3AI score0.00276EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.5 views

PT-2026-71751

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized cross-space access via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. The result is disclosure of inference output from a trained model in a different space that the user is not authoriz...

7.1CVSS5.5AI score0.00292EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.9 views

PT-2026-76031

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

5.3AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.3 views

PT-2026-71418

This vulnerability allows a normal non-admin user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758...

4.8CVSS5.2AI score0.00119EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.9 views

PT-2026-73166

Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections. The audit-log masking recognised only top-level request fields, and a bulk request nests its...

5.4AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71507

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22...

8.5CVSS5.5AI score0.0026EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.6 views

PT-2026-71833

Name of the Vulnerable Software and Affected Versions Trigger.dev versions prior to 4.5.6 Description An issue exists in the platform for building and deploying managed AI agents and workflows. The endpoint "/api/v1/deployments/:deploymentId/background-workers" invokes the...

9.9CVSS5.1AI score0.00342EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.3 views

PT-2026-71708

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...

8.8CVSS6.2AI score0.00689EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.5 views

PT-2026-71675

vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.26.0, the /v1/completions CompletionRequest.prompt field in vllm/entrypoints/openai/completion/protocol.py accepts an unbounded liststr or listlistint, prompt to seq in vllm/renderers/inputs/preprocess.py and...

6.5CVSS5.3AI score0.00388EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.8 views

PT-2026-71659

rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by sending a file list whose first entry is a dot entry not typed as a directory. The daemon dereferences the first file list entry as a director...

6.9CVSS5.4AI score0.00383EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71442

Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code executes the full untruncated command. Attackers can position dangerous content past byte 500 in a Bash command field to bypass the operator's hard-deny list a...

8.8CVSS5.7AI score0.00358EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71698

The Bluetooth host GATT client function parse read std char desc in subsys/bluetooth/host/gatt.c parses an ATT Read By Type Response received from a remote GATT server during BT GATT DISCOVER STD CHAR DESC discovery. The per-entry stride rsp-len is taken directly from the peer's PDU, and the pars...

6.5CVSS5.5AI score0.00102EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71511

Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...

9.3CVSS5.7AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71526

Subscriber Broken Access Control in AcyMailing SMTP Newsletter = 10.11.1 versions...

6.5CVSS5.2AI score0.00326EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.2 views

PT-2026-71644

During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges...

8.5CVSS5.7AI score0.00109EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.7 views

PT-2026-71497

Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...

7.2CVSS5.3AI score0.0037EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71518

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

6.5CVSS5.2AI score0.00352EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71437

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBookmarkLabels endpoint that returns all bookmark labels in the workspace without publish-access filtering. Anonymous readers and publish-mode readers can obtain the complete bookmark vocabulary across the...

6.9CVSS5.2AI score0.00194EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71634

rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker who can manipulate destination path parent components to redirect file writes to unintended locations. Attackers can...

6.3CVSS5.2AI score0.00094EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.3 views

PT-2026-71605

Unauthenticated Broken Access Control in InstaWP Connect = 0.1.3.7 versions...

5.3CVSS5.2AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.3 views

PT-2026-71689

Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server. The tampered build introduced a rogue PHP file libs/class-license-sync.php, loaded via a require once directive added to fluentformpro.php...

9.8CVSS5.3AI score0.00463EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71570

Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...

6.5CVSS5.2AI score0.00194EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71591

Unauthenticated Cross Site Scripting XSS in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...

7.1CVSS5.1AI score0.00237EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.3 views

PT-2026-71905

luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks. Attackers can exploit path traversal via /.%2E in the lxc name parameter to escape container directories...

9.9CVSS5.8AI score0.00422EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.3 views

PT-2026-71848

IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key...

5.3CVSS5.3AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71696

CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send specially crafted data to a server causing a persistent denial of service...

8.7CVSS5.3AI score0.00312EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.2 views

PT-2026-71462

Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These...

8.8CVSS8.2AI score0.00655EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.3 views

PT-2026-71469

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Type confusion in the "refint" module allows an object...

8.8CVSS5.9AI score0.00405EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.2 views

PT-2026-71464

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...

8.8CVSS8.4AI score0.00596EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.2 views

PT-2026-71468

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A heap buffer overflow occurs in the plperl language...

8.8CVSS6.2AI score0.00596EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.3 views

PT-2026-71476

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Type confusion involving the internal data type arguments...

8.8CVSS5.9AI score0.00604EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.3 views

PT-2026-71479

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description An integer wraparound in the fuzzystrmatch module allows ...

8.8CVSS6.1AI score0.00479EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-71481

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A type confusion issue exists in the portal and cursor...

8.8CVSS5.8AI score0.0059EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.4 views

PT-2026-76037

A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...

5.6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.9 views

PT-2026-76038

Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...

5.5AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/13 12:0 a.m.5 views

PT-2026-71795

A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a recursive routine and applies no bound to the length of the value being validated, so the validation...

6.5CVSS5.5AI score0.00359EPSS
SaveExploits0References2
Total number of security vulnerabilities200219