exploit

CVE-2023-4911, widely known as “Looney Tunables,” is a critical buffer overflow vulnerability residing in the GNU C Library’s (glibc) dynamic

CVE-2026-45185 represents a critical vulnerability discovered within the Exim mail transfer agent. It specifically targets the BDAT (binary data) message

The CVE-2021-44228 vulnerability, commonly known as Log4Shell, affects the Apache Log4j Java-based logging library. It allows a remote attacker to

The vulnerability resides within Microsoft.OpenApi.YamlReader and Microsoft.OpenApi.Readers libraries, which utilize SharpYaml to parse YAML-based OpenAPI specifications. SharpYaml parses YAML documents

The CVE-2026-105133 vulnerability represents a critical security flaw affecting Ahsay AhsayCBS backup solutions across all versions up to 10.3.2. The

The CVE-2024-20401 vulnerability exists within the Advanced Malware Protection feature of Cisco Secure Email Gateway. It stems from improper handling

CVE-2026-24061 is a critical remote authentication bypass vulnerability affecting the GNU InetUtils telnetd server across versions 1.9.3 through 2.7. The

CVE-2026-59180 represents a security vulnerability in the Apprise notification library stemming from improper HTTP redirect handling. HTTP-based notification plugins and

The MarcosOzkan mcp-shodan repository provides an integration layer for querying Shodan assets through the Model Context Protocol. Recent updates across

The `cve-search_mcp` repository by `damian1751` serves as an integration layer for querying vulnerability data through the Model Context Protocol (MCP),

CVE-2024-36057 represents a severe command injection vulnerability affecting the Koha Library Management System. The flaw specifically resides within the upload-cover-image.pl

CVE-2024-36057 is a critical remote code execution vulnerability affecting the Koha Library Management System. The flaw resides specifically within the

CVE-2024-36058 represents a critical time-based blind SQL injection vulnerability residing within the Online Public Access Catalog (OPAC) component of Koha

CVE-2026-16723 is a critical remote code execution vulnerability impacting Alibaba Fastjson versions 1.2.68 through 1.2.83, as well as fastjson2 variants

Modern automated penetration testing orchestration relies on real-time threat intelligence feeds to prioritize target analysis. The integration of CVE, KEV,

CVE-2021-32838 targets Flask-RESTX, an API extension that Freshermeat integrated into version 0.8.0 to handle request parsing and Swagger documentation. The

In RemotePower version 7.1.0, a significant multi-tenant security flaw allowed unauthorized administrative actions across installations. Specifically, a tenant administrator possessed

The vulnerability arises due to improper parsing and validation logic handling dependency specifications within the `shards-audit` utility for Crystal applications.

The vulnerability in rosdal/patchd v0.1.0 stems from an insecure project skeleton initialization and release workflow configuration flaw. During initial repository

CVE-2026-62282 represents a significant security flaw involving Server-Side Request Forgery within OpenCVE notification testing mechanisms. The vulnerability is triggered when

CVE-2026-63077 is a critical unauthenticated remote code execution vulnerability impacting JetBrains TeamCity On-Premises environments. The security flaw stems from unsafe

CVE-2026-79987 is a critical remote code execution vulnerability impacting Craft CMS versions 5.9.0 through 5.10.12. The flaw exists within the

CVE-2026-108836 represents a critical server-side request forgery vulnerability discovered within the popular Ollama artificial intelligence platform. The security flaw specifically

CVE-2026-84377 is an authenticated Server-Side Request Forgery vulnerability affecting the LiteLLM proxy server. The flaw arises from inadequate request-body validation

The security vulnerability tracked under CVE-2025-68145 represents a critical flaw residing within the configuration loading mechanism and path handling components

The vulnerability identified within the cve-search_mcp repository stems from improper handling of file system paths and unvalidated configuration loading routines

CVE-2025-41115 is a critical privilege escalation and incorrect privilege assignment vulnerability affecting Grafana Enterprise. The vulnerability resides specifically within the

CVE-2026-60000 represents a critical GSSAPI username validity oracle vulnerability discovered within SSH authentication mechanisms and auditing implementations. During the initial

CVE-2024-3094 represents a sophisticated supply chain compromise discovered in the widely used XZ Utils data compression library. Specifically, malicious actors

This security vulnerability affects Microsoft.WindowsDesktop.App.Runtime (WPF) components across multiple .NET versions, stemming from permissive input validation and handling weaknesses categorized

Microsoft WindowsDesktop.App.Runtime contains a critical security vulnerability within Windows Presentation Foundation (WPF) pixel-shader bytecode parsing. Specifically, when an application processes

Microsoft Windows Presentation Foundation contains a critical security flaw residing within the Microsoft.WindowsDesktop.App.Runtime component. Specifically, crafted WPF pixel-shader bytecode can

This security advisory addresses a critical vulnerability found within the Microsoft.WindowsDesktop.App.Runtime component, specifically impacting WPF applications processing XML Paper Specification

Microsoft has released a security advisory to address a critical security feature bypass vulnerability affecting the Kestrel web server component

This security vulnerability affects Microsoft .NET projects utilizing the Microsoft.WindowsDesktop.App.Runtime (WPF) package across multiple versions. The underlying issue stems from

On Windows systems, reusing a single `SocketAsyncEventArgs` instance across both IPv4 and IPv6 datagram sockets introduces a critical flaw within

This security vulnerability affects Unix named-mutex and shared-memory paths within Microsoft .NETCore.App.Runtime and System.Private.CoreLib. Because these runtime components handle IPC

CVE-2026-85790 is a technical use-after-free security flaw discovered in the Microsoft.Native.Quic.MsQuic.Schannel component utilized across Microsoft .NET ecosystems on Windows platforms.

The CVE-2026-96236 vulnerability resides within the ASP.NET Core request-localization fallback component found in modern .NET platforms. When handling incoming web

This security advisory details a critical vulnerability affecting Microsoft .NETCore.App.Runtime and System.Private.CoreLib components across Unix-based environments, specifically targeting Linux and

This security vulnerability affects Microsoft .NET projects utilizing System.Security.Cryptography.Xml and System.Private.Xml, specifically involving inefficient algorithmic complexity and unconstrained processing risks.

CVE-2026-96959 represents a critical resource allocation vulnerability within Microsoft .NET components, specifically impacting `System.Security.Cryptography.Xml` and System.Private.Xml. The underlying issue occurs

The vulnerability resides within the Microsoft.WindowsDesktop.App.Runtime framework, specifically affecting Windows Presentation Foundation (WPF) components that handle XPS synthetic hyperlinks. When

This security vulnerability affects Microsoft .NET projects utilizing the Microsoft.WindowsDesktop.App.Runtime package, specifically impacting WPF applications through multiple weaknesses in XAML

ASP.NET Core Negotiate LDAP authentication handles identity verification in enterprise environments. When applications process incoming authentication requests via Negotiate, they

This security advisory addresses a vulnerability located within the Microsoft.AspNetCore.WebUtilities component, specifically tied to how form data is parsed and

This security vulnerability resides within the System.Security.Cryptography.Pkcs component on Windows operating systems, specifically affecting how the EnvelopedCms.Decode method processes cryptographic

CVE-2026-70194 is a security vulnerability residing within the System.Net.Security component of .NET 11, specifically impacting post-handshake TLS client authentication mechanisms

The CVE-2026-96958 vulnerability resides within the cryptographic XML and private XML components of Microsoft .NET. It specifically targets classes handling

This security vulnerability involves a race condition flaw within the Blazor framework’s authorization pipeline, specifically residing in the Microsoft.AspNetCore.Components.Authorization package

This security advisory details a critical vulnerability identified within Microsoft.AspNetCore.WebUtilities, specifically affecting how the FileBufferingReadStream handles request data processing. During

Microsoft QUIC implementation as integrated within multiple modern versions of .NET on Windows contains a critical vulnerability related to how

This security vulnerability affects Microsoft.AspNetCore.SignalR.Common and Microsoft.AspNetCore.SignalR.Core components within .NET frameworks, specifically impacting stateful reconnect clients. In the architecture of

The vulnerability tracked under CVE-2026-70175 affects Microsoft.AspNetCore.Identity and Microsoft.AspNetCore.Identity.UI within ASP.NET Core applications. Specifically, the password-reset and account-confirmation workflows contain

Log4Shell is a critical remote code execution vulnerability residing within the Apache Log4j logging framework versions 2.0 through 2.14.1. The

CVE-2026-84377 is a moderate-severity security vulnerability affecting LiteLLM proxy servers. It allows authenticated remote users to perform Server-Side Request Forgery

CVE-2026-108913 represents a critical security flaw located within the omarchy-theme-set component of the Omarchy ecosystem. Specifically, versions of Omarchy prior

CVE-2024-29041 affects the vulnq package where improper parsing and NVD vendor mapping errors can cause certain ecosystem queries (such as

CVE-2017-11427 represents a critical security flaw involving XML signature wrapping and comment injection vulnerabilities found within various SAML implementations and

CVE-2026-54990 represents a critical heap-based buffer overflow vulnerability residing within the Microsoft Windows 11 Remote Desktop Client component. The vulnerability

CVE-2024-24576 is a critical remote code execution vulnerability residing within the Rust standard library on Windows systems, specifically impacting how

CVE-2026-0300 represents a critical logic validation flaw within automated vulnerability ingestion and enrichment pipelines utilized by decentralized metadata distribution architectures.

CVE-2020-1066 is a critical elevation of privilege vulnerability residing within the Microsoft .NET Framework component. The core underlying flaw stems

CVE-2026-105950 represents a security vulnerability discovered within getformwork formwork versions up to 2.3.12. The core issue originates inside the component

CVE-2026-86350 is a significant security regression flaw that was inadvertently introduced during the remediation process for a prior vulnerability, specifically

CVE-2026-39860 represents a critical security flaw residing within the core mechanism that the Nix package manager utilizes to register outputs

The nix-k8s-sentinel utility provides automated security analysis for declarative Kubernetes and NixOS configurations. Version 0.2.0 introduces the NixOS Flake Lockfile

The vulnerability centers around supply chain security and dependency handling within Node.js applications monitored by security platforms like Patchstack. Specifically,

Windows 11 Win32K subsystem contains a local information disclosure vulnerability. The flaw resides in the user mode mapping of the

The CVE-2026-42018 vulnerability represents a critical flaw in authentication mechanisms within enterprise artifact repository management systems, specifically affecting API endpoints

CVE-2026-40261 is a critical remote code execution vulnerability residing in the PHP Composer dependency manager. The vulnerability stems from improper

CVE-2024-3094 is an extremely sophisticated supply-chain vulnerability and malicious backdoor injected directly into the upstream release tarballs of the XZ

CVE-2025-6514 represents a critical remote code execution vulnerability discovered in the `mcp-remote` proxy tool. The flaw arises due to improper

CVE-2026-42356 represents a subtle yet significant security flaw discovered within the Apache HTTP Server core architecture, specifically impacting software versions

CVE-2026-41940 is a critical pre-authentication remote code execution and authentication bypass vulnerability affecting cPanel & WHM installations. The vulnerability originates

CVE-2023-46729 is a critical Server-Side Request Forgery vulnerability present in the Sentry JavaScript SDK for Next.js. Specifically, applications utilizing the

This vulnerability exists within the Openfire administration console, specifically stemming from improper handling of URI paths by the setup mechanisms.

CVE-2024-3094 is a critical supply chain vulnerability discovered in XZ Utils versions 5.6.0 and 5.6.1. The malicious actor injected obfuscated

The Apache Log4j vulnerability, designated as CVE-2021-44228 and commonly known as Log4Shell, is a critical security flaw affecting Java-based logging

CVE-2021-44228, widely known as Log4Shell, is a critical remote code execution vulnerability impacting Apache Log4j versions 2.0 through 2.14.1. The

CVE-2024-21626 is a critical file descriptor leak vulnerability found in runc <=1.1.11, affecting containerization solutions like Docker and Kubernetes. The

CVE-2026-29078 represents a significant vulnerability found within collaborative platform components handling Common Platform Enumerations and package URL mappings. Specifically, the

Apache Druid features an embedded functionality designed to allow execution of user-provided JavaScript code within specific data ingestion and processing

The CVE-2026-34841 incident centers around a sophisticated software supply chain attack. An attacker successfully compromised the npm maintainer account of

CVE-2019-12760 is a security vulnerability residing in the parso library’s grammar parsing and caching mechanism. Specifically, parso utilizes Python’s built-in

Bouncy Castle Java cryptographic libraries prior to version 1.85 and their associated LTS and FIPS branches suffer from complex supply

CVE-2026-107230 is a high-severity security flaw residing within the AsyncHttpClient library across versions ranging from 2.0.0 up to and including

CVE-2026-108259 is a critical code injection vulnerability affecting `@tinacms/cli` versions prior to 3.0.0. The vulnerability originates from how the command-line

The CVE-2026-72712 vulnerability is a critical flaw residing within the Nmap Scripting Engine packet parsing library, specifically inside the Packet:parse_options()

CVE-2025-43859 represents a critical security vulnerability impacting the h11 Python HTTP/1.1 library, which serves as an underlying dependency for packages

CVE-2021-44228, widely known as Log4Shell, is a critical vulnerability affecting Apache Log4j versions 2.0-beta9 to 2.14.1. The vulnerability arises from

Log4j is a prominent Java logging library used globally. The vulnerability enables unauthenticated remote code execution on servers. It stems

CVE-2026-53921 is a critical Remote Code Execution vulnerability residing within the DHCPv6 service daemon of OpenWrt routers. The flaw arises

The security advisory for `the-forbidden-knowledge/cve-monitor` repository highlights a critical information exposure vulnerability within unauthenticated release tracking endpoints and API handlers.

CVE-2026-21858 is a critical unauthenticated vulnerability in the n8n workflow automation platform. The issue originates from improper handling of HTTP

CVE-2021-36260 is a critical command injection vulnerability affecting multiple Hikvision IP camera models and network video recorders. The flaw exists

CVE-2021-44228, widely known as Log4Shell, is a critical remote code execution vulnerability affecting the Apache Log4j logging library in versions

CVE-2023-31484 is a critical vulnerability affecting the CPAN.pm module before version 2.35. The flaw occurs because CPAN does not verify

CVE-2025-71176 is a security vulnerability in the pytest testing framework affecting versions up to 9.0.2 on UNIX platforms. The flaw