270143 matches found
CVE-2026-41449 UAC < 3.3.0 Command Injection via run_command.sh
UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the runcommand function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can...
CVE-2026-41449 UAC < 3.3.0 Command Injection via run_command.sh
UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the runcommand function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can...
CVE-2026-41449
UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 are affected by a command injection vulnerability in the _run_command function. The root cause is the failure to sanitize untrusted data—such as usernames, process names, or filenames—before passing it to shell execution, allowing attack...
EUVD-2026-64009
UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the runcommand function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can...
Exploit for Improper Access Control in Widgetfactorylimited Jce
JCEzploit-CVE-2026-48907 JCEzploit is a powerful, fully-aut...
CVE-2026-17250 Authenticated Remote Code Execution via Stack-Based Buffer Overflow in Firmware Update Handling
A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadata within a firmware image. Successful exploitation may allow an authenticated attacker to trigger memory corruption and execute arbitrary...
DEBIAN-CVE-2026-39909
Bulletin has no description...
CVE-2026-39909
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Security Bulletin: Vulnerabilities in IBM AIX and PowerVM VIOS
Summary Updated Aug 21, 2026: Updated the summary to highlight the additional installation instructions. IBM is providing security updates for supported AIX and VIOS releases that are under active fix support. Delivered through Service Packs SPs and Fix Packs FPs, these updates remediate...
CVE-2026-39909
CVE-2026-39909 affects llama.cpp before b8585 , specifically the RPC server's GRAPH_RECOMPUTE handler , where a use-after-free vulnerability allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaimin...
CVE-2026-39909
...
EUVD-2026-64001
llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...
CVE-2026-39909 llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler
llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...
CVE-2026-39909
Removed by vendor...
Exploit for Heap-based Buffer Overflow in Google Chrome
CVE-2026-76036 — Dawn WebGPU NPOT Depth/Stencil Mipmap Detec...
CVE-2026-77087 Paperclip before 0.3.1 Remote Code Execution via DNS Rebinding
Paperclip before 0.3.1 in default localtrusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated A...
CVE-2026-77087 Paperclip before 0.3.1 Remote Code Execution via DNS Rebinding
Paperclip before 0.3.1 in default localtrusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated A...
CVE-2026-77806
SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...
CVE-2026-77806
SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...