41137 matches found
CVE-2026-14863 FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection
FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by uploading a file with a malicious filename containing shell command substitution sequences. The thumbnail generation system passes...
CVE-2026-14863
FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by uploading a file with a malicious filename containing shell command substitution sequences. The thumbnail generation system passes...
CVE-2026-48120
A flaw was found in Kakoune, a code editor. A local attacker could exploit a vulnerability in the bundled autorestore.kak script by crafting malicious backup files. When a user simply opens a file, these malicious backup files can lead to the execution of arbitrary Kakoune and shell commands. Thi...
GHSA-F23P-VX2J-J53R vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-54FX-42GC-7VW4 vulnerabilities
Vulnerabilities for packages: langfuse...
Exploit for Insertion of Sensitive Information into Log File in Hitachi Configuration_Manager
FreePBX CVE-2025-57819 Exploit Description This script exp...
Malicious code in joule-sbx-poc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c460336aaf7e02cc7b37e4a0e58df5e22431f9de9ea852af21bb1aa2f333039c During installation, the code exfiltrates basic information and exfiltrates more information to a localhost service as well as starts a reverse shell there. It...
MAL-2026-13756 Malicious code in joule-sbx-poc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c460336aaf7e02cc7b37e4a0e58df5e22431f9de9ea852af21bb1aa2f333039c During installation, the code exfiltrates basic information and exfiltrates more information to a localhost service as well as starts a reverse shell there. It...
CVE-2026-73224
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in...
CVE-2026-73222
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The...
CVE-2026-70335
creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:57+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:47:57+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285 2026-08-12 01:00:53+00:00| seen|...
CVE-2026-73224
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in...
CVE-2026-73224 Electerm check folder size function may get attacked by unsafe folder name
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in...
CVE-2026-73222 Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)
Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The...
CVE-2026-73081
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...
CVE-2026-62770
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-62770
CVE-2026-62770: Heap-based buffer overflow in Windows Shell is disclosed as a local privilege escalation vulnerability. Affects Windows Shell components; attacker must be authorized and can escalate privileges locally without user interaction (low privileges required, local access). CVSS 3.1 base...
CVE-2026-62770 Windows Shell Elevation of Privilege Vulnerability
...
