Threats tagged 'web'

380 threats

Severity	CVSS	Threat	Source	Published
Medium	–	Cybersecurity AI (CAI) Framework 0.5.10 · Command Injection Medium2026-04-30Exploit-DB RSS Feed Cybersecurity AI (CAI) Framework 0.5.10 - Command Injection Exploit #web #exploit	Exploit-DB RSS Feed	2026-04-30
Medium	–	Camaleon CMS v2.9.0 · Path Traversal Medium2026-04-30Exploit-DB RSS Feed Camaleon CMS v2.9.0 - Path Traversal Exploit #web #exploit	Exploit-DB RSS Feed	2026-04-30
Critical	–	Js2Py 0.74 · RCE Critical2026-04-30Exploit-DB RSS Feed Js2Py 0.74 - RCE Exploit #web #rce #exploit	Exploit-DB RSS Feed	2026-04-30
Critical	–	Frigate NVR 0.16.3 · Remote Code Execution Critical2026-04-30Exploit-DB RSS Feed Frigate NVR 0.16.3 - Remote Code Execution Exploit #remote #web #exploit	Exploit-DB RSS Feed	2026-04-30
Medium	–	NiceGUI 3.6.1 · Path Traversal Medium2026-04-30Exploit-DB RSS Feed NiceGUI 3.6.1 - Path Traversal Exploit #web #exploit	Exploit-DB RSS Feed	2026-04-30
Critical	–	SumatraPDF 3.5.2 · Remote Code Execution Critical2026-04-30Exploit-DB RSS Feed SumatraPDF 3.5.2 - Remote Code Execution Vulnerability #remote #web #exploit	Exploit-DB RSS Feed	2026-04-30
Not rated	–	Today's Odd Web Requests, (Wed, Apr 29th) 2026-04-29SANS ISC Handlers Diary Today, two different "new" requests hit our honeypots. Both appear to be recon requests and not associated with specific vulnerabilities. But as always, please let me know if you have additional information News #web	SANS ISC Handlers Diary	2026-04-29
Critical	–	LangChain Core 1.2.4 · SSTI/RCE Critical2026-04-29Exploit-DB RSS Feed LangChain Core 1.2.4 - SSTI/RCE Exploit #web #rce #exploit	Exploit-DB RSS Feed	2026-04-29
Critical	–	Xibo CMS 4.3.0 · RCE via SSTI Critical2026-04-29Exploit-DB RSS Feed Xibo CMS 4.3.0 - RCE via SSTI Exploit #web #rce #exploit	Exploit-DB RSS Feed	2026-04-29
Medium	–	FacturaScripts 2025.43 · XSS Medium2026-04-29Exploit-DB RSS Feed FacturaScripts 2025.43 - XSS Exploit #web #xss #exploit	Exploit-DB RSS Feed	2026-04-29
Critical	–	JuzaWeb CMS 3.4.2 · Authenticated Remote Code Execution Critical2026-04-29Exploit-DB RSS Feed JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution Exploit #remote #web #exploit	Exploit-DB RSS Feed	2026-04-29
Critical	–	GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE) Critical2026-04-29Exploit-DB RSS Feed GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE) Exploit #remote #web #rce	Exploit-DB RSS Feed	2026-04-29
Medium	–	OpenKM 6.3.12 · Multiple Medium2026-04-29Exploit-DB RSS Feed OpenKM 6.3.12 - Multiple Exploit #web #exploit	Exploit-DB RSS Feed	2026-04-29
Medium	–	GeographicLib v2.5.1 · stack buffer overflow Medium2026-04-29Exploit-DB RSS Feed GeographicLib v2.5.1 - stack buffer overflow Exploit #web #exploit	Exploit-DB RSS Feed	2026-04-29
Medium	–	phpMyFAQ 4.0.16 · Improper Authorization Medium2026-04-29Exploit-DB RSS Feed phpMyFAQ 4.0.16 - Improper Authorization Exploit #web #php #exploit	Exploit-DB RSS Feed	2026-04-29
Critical	–	Craft CMS 5.6.16 · RCE Critical2026-04-29Exploit-DB RSS Feed Craft CMS 5.6.16 - RCE Exploit #web #rce #exploit	Exploit-DB RSS Feed	2026-04-29
Medium	–	HAX CMS 24.x - Stored Cross-Site Scripting (XSS) Medium2026-04-29Exploit-DB RSS Feed HAX CMS 24.x - Stored Cross-Site Scripting (XSS) Exploit #web #xss #exploit	Exploit-DB RSS Feed	2026-04-29
Not rated	–	Webinar Today: A Step-by-Step Approach to AI Governance 2026-04-28SecurityWeek Join the webinar to explore a practical, multi-layered roadmap to transition from fragmented AI usage to a governed, scalable ecosystem. The post Webinar Today: A Step-by-Step Approach to AI Governance appeared first on SecurityWeek . News #web	SecurityWeek	2026-04-28
Medium	–	Robinhood Vulnerability Exploited for Phishing Attacks Medium2026-04-28SecurityWeek Legitimate-looking emails coming from Robinhood systems lured recipients to phishing websites. The post Robinhood Vulnerability Exploited for Phishing Attacks appeared first on SecurityWeek . Exploit #web	SecurityWeek	2026-04-28
Medium	–	WordPress Plugin 5.2.0 · Broken Access Control Medium2026-04-22Exploit-DB RSS Feed WordPress Plugin 5.2.0 - Broken Access Control Exploit #web #exploit #wordpress	Exploit-DB RSS Feed	2026-04-22

Page 9 of 19