Lucene search
+L

263098 matches found

Nuclei
Nuclei
added 2026/08/23 2:28 a.m.66 views

Micro Focus UCMDB - Remote Code Execution

Micro Focus UCMDB is susceptible to remote code execution. Impacted products include Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and all earlier versions, and Operations Bridge containerized 2020.05, 2019.08, 2019.0...

10CVSS9.1AI score0.74449EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.153 views

Yii2 PHP Framework < 2.0.52 - Remote Code Execution

Yii2 PHP Framework before 2.0.52 is vulnerable to remote code execution via improper validation of the class key in JSON behaviors. An attacker can instantiate arbitrary PHP classes and achieve RCE. id: CVE-2024-58136 info: name: Yii2 PHP Framework 2.0.52 - Remote Code Execution author:...

9.8CVSS9.3AI score0.8464EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.162 views

Rudder Server < 1.3.0-rc.1 - SQL Injection

Rudder-server is part of RudderStack, an open source Customer Data Platform CDP. Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution RCE due to the rudder role in PostgresSQL having superuser permissions by default. Version...

8.8CVSS8.6AI score0.85825EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.24 views

VMware vRealize Log Insight - Improper Access Control to RCE

The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive files of an impacted appliance which can result in remote code execution. id: CVE-2022-31704 info: name: VMware vRealize Log Insight - Improper Acces...

9.8CVSS9.3AI score0.81011EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.52 views

Mongoose < 8.8.3 - Remote Code Execution

Mongoose before 8.8.3 can improperly use $where in match, leading to search injection. id: CVE-2024-53900 info: name: Mongoose 8.8.3 - Remote Code Execution author: h4mg severity: critical description: | Mongoose before 8.8.3 can improperly use $where in match, leading to search injection. impact...

9.1CVSS8.8AI score0.03988EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
added 2026/08/23 12:00 a.m.5 views

PT-2026-79764

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package...

8.5CVSS6.3AI score
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/22 4:47 p.m.25 views

Security Bulletin: IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control (CVE-2026-9762)

Summary IBM® Db2® is vulnerable to remote code execution when jdbc url is under user control. Vulnerability Details CVEID:CVE-2026-9762 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control. CWE:CWE-94:...

7.8CVSS6.3AI score0.00165EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/08/22 3:16 p.m.10 views

CVE-2026-76604

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik 4.7.2 - The PHP form element is vulnerable to the execution of user provided codes...

10CVSS
SaveExploits0References1
NVD
NVD
added 2026/08/22 3:16 p.m.8 views

CVE-2026-76605

Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik 4.7.2...

10CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/22 2:20 p.m.17 views

CVE-2026-76605 Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik 4.7.2...

10CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/22 2:20 p.m.7 views

EUVD-2026-64324

Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik 4.7.3 - ???...

10CVSS5.8AI score
SaveExploits0References1
CVE
CVE
added 2026/08/22 2:20 p.m.21 views

CVE-2026-76605

Fabrik is a Joomla extension (fabrikar.com) that is affected by a remote code execution vulnerability via its image element in versions prior to 4.7.3 . The flaw is network-exploitable with low complexity , requires no privileges and no user interaction , and carries a CVSS 4.0 score of 10.0 (Cri...

10CVSS5.8AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/22 2:18 p.m.18 views

CVE-2026-76604 Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik 4.7.2 - The PHP form element is vulnerable to the execution of user provided codes...

10CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/22 2:18 p.m.8 views

EUVD-2026-64320

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik 4.7.3 - The PHP form element is vulnerable to the execution of user provided codes...

10CVSS6.3AI score
SaveExploits0References1
CVE
CVE
added 2026/08/22 2:18 p.m.33 views

CVE-2026-76604

Fabrik is a Joomla extension (by fabrikar.com) that allows building forms and databases. In versions below 4.7.3 , the PHP form element permits execution of user-supplied code, enabling unauthenticated remote code execution over the network with no user interaction required. The CVSS 4.0 score is...

10CVSS6.2AI score
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/08/22 1:34 p.m.6 views

CVE-2026-71513

NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables outside the allowlisted namespace. Attackers can craft...

8.8CVSS6.7AI score
SaveExploits0
EUVD
EUVD
added 2026/08/22 1:34 p.m.8 views

EUVD-2026-64296

NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables outside the allowlisted namespace. Attackers can craft...

8.8CVSS6.8AI score
SaveExploits0References4
CVE
CVE
added 2026/08/22 1:34 p.m.14 views

CVE-2026-71513

NLTK versions 3.10.0 through 3.10.2 contain a remote code execution vulnerability in the AllowlistUnpickler component (picklesec.py). The root cause is that the allowlist validation checks only the pickle module string but not the global name, enabling attackers to resolve dotted names via attrib...

8.8CVSS6.8AI score
SaveExploits0References4
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.23 views

Group-Office < 26.0.5 - Remote Code Execution

Group-Office before versions 6.8.150, 25.0.82, and 26.0.5 is vulnerable to remote code execution via OS command injection. The endpoint email/message/tnefAttachmentFromTempFile directly concatenates the user-controlled parameter tmpfile into an exec call. By injecting shell metacharacters into...

9.4CVSS6.7AI score0.18536EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.77 views

elFinder < 2.1.58 - Remote Code Execution

studio-42/elfinder before 2.1.58 contains a remote code execution caused by execution of PHP code in a .phar file, letting attackers execute arbitrary PHP code if the server parses .phar files as PHP, exploit requires server to parse .phar files as PHP. id: CVE-2021-23394 info: name: elFinder...

9.8CVSS9.8AI score0.19083EPSS
SaveExploits1References4
Rows per page
Query Builder