149255 matches found
Security Bulletin: Multiple vulnerabilities affect IBM Cloud Pak System
Summary Multiple vulnerabilities affect IBM Cloud Pak System. These vulnerabilties have been addressed with IBM Cloud Pak System 2.3.5.1. Vulnerability Details CVEID:CVE-2025-15467 DESCRIPTION: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD...
EUVD-2026-94157
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...
CVE-2026-19386
A stack-based buffer overflow exists in ASUS router modules , which allows an authenticated nearby user to execute arbitrary code . This vulnerability is triggered by uploading a crafted configuration file that exceeds the expected buffer size. For specific details on affected versions and remedi...
CVE-2026-19386
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...
uaf-2023-28205
CVE-2023-28205: Vulnerabilidad de Use-After-Free en Apple WebKit Esta vulnerabilidad puede explotarse mediante contenido web manipulado maliciosamente, lo que permite a los atacantes ejecutar código arbitrario. Descripción El código desencadena una vulnerabilidad de use-after-free UAF al retrasar...
CVE-2022-26134
CVE-2022-26134 - Vulnerabilidad de inyección OGNL. En las versiones afectadas de Confluence Server y Data Center, existe una vulnerabilidad de inyección OGNL que permitiría a un atacante no autenticado ejecutar código arbitrario en una instancia de Confluence Server o Data Center. PoC: git clone...
CVE-2020-14882
CVE-2020-14882部署冰蝎内存马 众所周知，CVE-2020-14882是一个未授权漏洞，攻击者可以利用该漏洞在受影响的 WebLogic Server 上执行任意代码。 网上公开的poc中既是通过非法字符绕过访问，然后通过Gadget调用命令执行。那么在实际应用场景和红队攻击中光执行命令是远远不够的，这时候如何通过未授权漏洞进一步利用部署内存马就显得尤为重要。 漏洞分析文章网上一大堆，就是二次编码问题，直接看网上公开的执行代码POC： POST /console/images/%252e%252e/console.portal HTTP/1.1 Host:...
EUVD-2026-94105
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control...
csv-plus_vulnerability
csv-plusvulnerability 👻 Vulnerabilidad de Ejecución de Código Arbitrario en 2 Clics. CVE-2022-21241 ⚠ Este PoC fue creado para alertar a los usuarios e investigar vulnerabilidades en su propio CSV+, y está prohibido su uso para ataques. Vulnerabilidad Las siguientes versiones son vulnerables. CSV...
androguard
Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...
CVE-2026-93443
IBM Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to a flaw involving the improper neutralization of special elements used in code. This vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution . While no specific exploit links or scanner source co...
EUVD-2026-94109
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code...
CVE-2026-93449
IBM Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to arbitrary code execution . The flaw stems from improper control of code generation , which could be exploited by a remote authenticated attacker . The severity is rated as High (CVSS 3.1: 8.5). No specific exploit details or remedia...
EUVD-2026-94112
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation...
CVE-2026-93445
IBM Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to arbitrary code execution. A remote authenticated attacker can exploit the software due to improper control of generation of code (CWE-94). The vulnerability carries a CVSS 3.1 base score of 8.1 (High) , with impacts on confidentiali...
EUVD-2026-94113
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...
EUVD-2026-94115
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion...
CVE-2026-93674
Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to a critical remote code execution (RCE) flaw (CVE-2026-93674 ). The root cause is the improper neutralization of special elements used in an OS command (CWE-94), which allows a remote attacker to execute arbitrary code. This vulnerabilit...
