Vulnerabilities
Summary — last 7 days
New vulnerabilities4,679▼ 662 vs. last week
Critical / high1,855▼ 1,189 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)867▲ 773 vs. last week
More filters
6 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | Medium (6.1) | 0.58% | Exploit | Binary-husky GPT Academic | 3/20/2025 | 6/17/2026 | An open redirect vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs when a user is redirected to a URL specified by user-controlled input in the 'file' parameter without proper validation or sanitization. This can be exploited by attackers to conduct phishing attacks, distribute… | |
| Modified | High (7.8) | 0.74% | PoC | Binarynights Forklift | 11/17/2020 | 6/17/2026 | BinaryNights ForkLift 3.x before 3.4 has a local privilege escalation vulnerability because the privileged helper tool implements an XPC interface that allows file operations to any process (copy, move, delete) as root and changing permissions. | |
| Modified | Medium (6.8) | 9.8% | Exploit | Binarymoon TimthumbBinarymoon Wordthumb | 7/15/2014 | 6/17/2026 | TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter. | |
| Modified | Medium (6.8) | 23% | Exploit | Binarymoon Timthumb | 10/26/2013 | 6/16/2026 | TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute arbitrary code via a URL containing a white-listed domain in the src parameter, then accessing it via a direct request to the file in the cache directory, as exploited… | |
| Modified | High (7.5) | 27% | Exploit | Nvidia Binary Graphics Driver | 10/18/2006 | 6/16/2026 | The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory… | |
| Modified | Medium (4.3) | 1.8% | Exploit | Binary-concepts Binary Board System | 12/17/2005 | 6/16/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) inreplyto, (2) article, and (3) board parameters to reply.pl, (4) branch, (5) board, and (6) stats.pl parameters to (b) stats.pl, and (7) board… |