Lucene search
+L

124952 matches found

CVE
CVE
added 2026/08/25 6:27 a.m.15 views

CVE-2026-68062

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

8.5CVSS8.7AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 1:30 a.m.8 views

CVE-2026-78680

NLTK versions before 3.10.3 are vulnerable to arbitrary code execution via the Graphviz dot binary . The root cause is that dependencygraph.dot2img and AlignedSent._repr_svg_ invoke dot using a bare name rather than a validated absolute path. On Windows , an attacker can place a malicious dot bin...

8.5CVSS6.1AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 1:30 a.m.3 views

EUVD-2026-65226

NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot2img and AlignedSent.reprsvg, allowing attackers to execute arbitrary code by placing a malicious dot binary in the search path or current working directory. Attackers can...

8.5CVSS6.1AI score
SaveExploits0References2
CVE
CVE
added 2026/08/25 1:30 a.m.8 views

CVE-2026-56702

Adminer versions prior to 5.4.3 are affected by an unrestricted file upload vulnerability in the AdminerFileUpload plugin. The root cause is a permissive default extension allowlist that allows authenticated users to upload PHP files by targeting columns ending in _path. When the uploadPath direc...

8.8CVSS6.1AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/08/25 12:18 a.m.32 views

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

8.5CVSS6.1AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/25 12:18 a.m.34 views

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.4CVSS6AI score0.00456EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 8:58 p.m.5 views

EUVD-2026-65152

A maliciously crafted FLT file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

7.8CVSS6.2AI score
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/24 5:55 p.m.5 views

kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A race condition exists in the SCTPSENDALL path where a cached list entry is not properly revalidated after the socket lock is temporarily released. This allows a local attacker or a remote attacker v...

7.8CVSS6.1AI score0.00104EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/24 4:46 p.m.8 views

Malicious code in kelly-stake-sizing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca23e704ca44d185fc873044a3a967e06d996970f59a526d3390e1f0ab45a9d [email protected] declares postinstall = 'node scripts/install-check.cjs'. That script fetches a JSON config from...

5.9AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/24 4:39 p.m.3 views

gitpython: GitPython: Command Injection via Git option prefix abbreviation

A flaw was found in GitPython. This vulnerability stems from an incomplete command injection blocklist that fails to account for Git's long-option prefix abbreviation feature. An attacker can bypass existing security measures by using abbreviated option names, which Git then resolves to dangerous...

8.8CVSS8.6AI score0.01449EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/24 4:39 p.m.3 views

gitpython: GitPython: Arbitrary code execution via command injection due to unguarded Git options

A flaw was found in GitPython where it fails to properly sanitize dangerous Git options. This vulnerability allows an attacker to inject arbitrary commands when using functions like Repo.archive and git.lsremote, potentially leading to arbitrary code execution. Additionally, functions such as...

8.6CVSS8.3AI score0.00949EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/24 4:39 p.m.3 views

gitpython: GitPython: Arbitrary Code Execution via Joined Short Options Bypass

A flaw was found in GitPython. A remote attacker can exploit a vulnerability where the software fails to properly recognize joined short-option forms e.g., -u when enforcing its default unsafe-option gate. This allows the attacker to bypass security checks and execute arbitrary commands during a...

9.8CVSS8.8AI score0.00379EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/24 4:39 p.m.4 views

aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...

7.3CVSS7.4AI score0.00179EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/24 4:36 p.m.3 views

aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the CookieJar.load function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicio...

7.3CVSS7.4AI score0.00179EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/24 4:36 p.m.3 views

gitpython: GitPython: Command Injection via Git option prefix abbreviation

A flaw was found in GitPython. This vulnerability stems from an incomplete command injection blocklist that fails to account for Git's long-option prefix abbreviation feature. An attacker can bypass existing security measures by using abbreviated option names, which Git then resolves to dangerous...

8.8CVSS8.6AI score0.01449EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/24 4:36 p.m.4 views

gitpython: GitPython: Arbitrary code execution via command injection due to unguarded Git options

A flaw was found in GitPython where it fails to properly sanitize dangerous Git options. This vulnerability allows an attacker to inject arbitrary commands when using functions like Repo.archive and git.lsremote, potentially leading to arbitrary code execution. Additionally, functions such as...

8.6CVSS8.3AI score0.00949EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/24 4:36 p.m.3 views

gitpython: GitPython: Arbitrary Code Execution via Joined Short Options Bypass

A flaw was found in GitPython. A remote attacker can exploit a vulnerability where the software fails to properly recognize joined short-option forms e.g., -u when enforcing its default unsafe-option gate. This allows the attacker to bypass security checks and execute arbitrary commands during a...

9.8CVSS8.8AI score0.00379EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/24 3:35 p.m.6 views

Important: Red Hat Security Advisory: gstreamer1-plugins-base security update

An update for gstreamer1-plugins-base is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.8CVSS8.4AI score0.00238EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/24 3:21 p.m.5 views

CVE-2026-74640

A flaw was found in the Linux kernel's ALSA FireWire Control Protocol FCP. An unprivileged process can trigger an out-of-bounds write by reading controls on /dev/snd/controlC0 after an oversized Level Meter map has been installed. This occurs because the fcpmeterctlget function writes beyond its...

7CVSS6AI score0.00166EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 3:21 p.m.5 views

CVE-2026-68508

A flaw was found in Hydra. The hydra.utils.instantiate function, used for configuring complex applications, can be exploited by passing untrusted configuration. This allows an attacker to control target values and arguments, leading to the execution of arbitrary code within the application's...

7.8CVSS6AI score0.00252EPSS
SaveExploits0References2
Rows per page
Query Builder