270067 matches found
PT-2026-82825
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description A heap overflow in the iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic. A heap overflow occurs when...
PT-2026-82823
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description A stack-based buffer overflow occurs in the epm Endpoint Protection Manager service, which is utilized by the deprecated Mobile Security feature. This flaw allows an...
PT-2026-82830
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description A stack-based buffer overflow in the iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic. A stack-based...
WSOB
😭 WSOB CVE-2022-29464 😭 WSOB é uma ferramenta Python criada para explorar a nova vulnerabilidade no WSO2 atribuída como CVE-2022-29464. Detalhes do CVE-2022-29464: Certos produtos WSO2 permitem upload de arquivos irrestrito com consequente execução remota de código. O atacante deve usar um endpoi...
CVE-2026-5203
CVE-2026-5203 — CMS Made Simple ≤ 2.2.22 RCE（路径遍历 + 任意文件上传） 摘要 CMS Made Simple ≤ 2.2.22 中的 UserGuide 模块的 XML 导入功能未能清理用户提供的文件名，允许经过身份验证的管理员通过路径遍历序列将任意文件（例如 PHP Web Shell）上传到服务器文件系统的任何位置。 字段| 值 ---|--- 类型| 路径遍历 / 任意文件上传 → RCE 组件| UserGuide 模块 — XML 导入 受影响文件|...
CVE-2026-55182 LibreNMS: Remote Code Execution by Signal Alert Transportation Module
LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...
CVE-2026-55182 LibreNMS: Remote Code Execution by Signal Alert Transportation Module
LibreNMS is a network monitoring system. In versions from 21.6.0 up to 26.5.0, the Signal alert transport is vulnerable to command injection because the signal-cli path and the Recipient field of an alert transport entry are insufficiently escaped before being passed to an exec call. An...
CVE-2026-55182
LibreNMS , a network monitoring system, is vulnerable to command injection in the Signal alert transport module (versions 21.6.0 through 26.5.0). The root cause lies in insufficiently escaped signal-cli path and Recipient field in the deliverAlert function of Signal.php, which are passed to unsaf...
CVE-2026-75411
JeecgBoot v3.9.2 is vulnerable to Remote command execution. The CodeNode component of the AI Flow module supports Groovy script execution. While the SecurityCheck class employs a blacklist mechanism to intercept dangerous calls, the dynamic nature of Groovy allows this blacklist to be completely...
CVE-2026-75363
An issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via the /usr/bin/webmgnt, /cgi-bin/mbox-config, and the parameters timestr, displayn...
CVE-2026-39275
Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, field-select.js and tags.js components...
CVE-2026-52103
A zero-click remote code execution RCE vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the application without user interaction via sending a crafted payload in a text message...
CVE-2025-55182_CVE-2025-66478
CVE-2025-55182 - Esecuzione Remota di Codice nei Server Components di Next.js/React Panoramica Questo repository contiene un exploit Proof-of-Concept PoC per CVE-2025-55182, una vulnerabilità critica di Esecuzione Remota di Codice RCE che interessa i Server Components di React nelle versioni 19.x...
CVE-2026-68861
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2026-60004
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation...
CVE-2026-54245
Fleet is an open-source device management platform built on osquery. In versions prior to 4.86.2, the Okta conditional access integration in Fleet Premium is vulnerable to SQL injection through a host-supplied value that is used in a database query without proper parameterization, allowing an...
CVE-2026-60004
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation...
CVE-2026-60004
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation...
