|
1451
|
7.5 |
HIGH
Network
|
-
|
-
|
A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path starting with /woshome
|
CWE-23
Relative Path Traversal
|
CVE-2026-8361
|
2026-05-30 05:26 |
2026-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1452
|
9.8 |
CRITICAL
Network
|
-
|
-
|
A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long URL path starting with /woshome
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-8362
|
2026-05-30 05:26 |
2026-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1453
|
9.8 |
CRITICAL
Network
|
-
|
-
|
A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long URL path starting with /resources:
|
CWE-121
Stack-based Buffer Overflow
|
CVE-2026-8363
|
2026-05-30 05:26 |
2026-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1454
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes remote HTTP messages with URL paths starting with /resources, /status, /sysinfo,…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-8364
|
2026-05-30 05:26 |
2026-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1455
|
3.3 |
LOW
Physics
|
-
|
-
|
Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a double free in librz/core/cmd/cmd_search.c:byte_pattern_search() due wrong pointer ownership declared. This vul…
|
CWE-415
Double Free
|
CVE-2026-45324
|
2026-05-30 05:21 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1456
|
3.3 |
LOW
Local
|
-
|
-
|
Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit e6d0937c8a083e23ed76c…
|
CWE-125
Out-of-bounds Read
|
CVE-2026-45613
|
2026-05-30 05:21 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1457
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Formie is a Craft CMS plugin for creating forms. Prior to 2.2.20 and 3.1.24, unauthenticated users could submit crafted values into Hidden fields (with Default value → Custom) that were evaluated as …
|
CWE-94 CWE-693 CWE-1336
Code Injection Protection Mechanism Failure Improper Neutralization of Special Elements Used in a Template Engine
|
CVE-2026-45697
|
2026-05-30 05:21 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1458
|
- |
|
-
|
-
|
Formie is a Craft CMS plugin for creating forms. Prior to 2.2.21 and 3.1.26, unauthenticated users could modify existing submissions by posting a known or guessed submission ID to formie/submissions/…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2026-47266
|
2026-05-30 05:21 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1459
|
7.4 |
HIGH
Network
|
-
|
-
|
Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers to cause the server to issue arbitrary outbound HTTP requests by …
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-48555
|
2026-05-30 05:21 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1460
|
8.8 |
HIGH
Network
|
-
|
-
|
Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in FileAdder::defaultSanitizer(). The sanitizer checks only the final filename suffix, allowing double-ex…
|
CWE-184
Incomplete Blacklist
|
CVE-2026-48557
|
2026-05-30 05:21 |
2026-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|