262066 matches found
CVE-2026-72819 Grav CMS before 2.0.13 Remote Code Execution via ZIP Upload
Grav CMS before 2.0.13 contains a remote code execution vulnerability in the Flex Objects plugin settings validation that allows authenticated users to execute arbitrary code by uploading a ZIP file containing PHP code. Attackers can bypass routine name validation by using array notation instead ...
CVE-2026-72819
Grav CMS before 2.0.13 contains a remote code execution vulnerability in the Flex Objects plugin settings validation that allows authenticated users to execute arbitrary code by uploading a ZIP file containing PHP code. Attackers can bypass routine name validation by using array notation instead ...
CVE-2026-72819 Grav CMS before 2.0.13 Remote Code Execution via ZIP Upload
Grav CMS before 2.0.13 contains a remote code execution vulnerability in the Flex Objects plugin settings validation that allows authenticated users to execute arbitrary code by uploading a ZIP file containing PHP code. Attackers can bypass routine name validation by using array notation instead ...
Exploit for CVE-2020-9373
CVE-2020-9373 – Netgear R6400 UPnP upnpd stack overflow vuln...
Malicious code in game_overlay (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e941794f17bbd4170928ecfb4c2affa3b9464d9227bc5671e4899aaca4a88db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-14099 Malicious code in zip-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9a990db9c306a25a8b0663088429ef5cf3939c32a9f8d6b1fc3066e8bf42a78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rtms-manager-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dcee6487432651f905e12482d6a32a94b390cac60f6ece90ac93432d76763af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SpEL Injection
Spring Data KeyValue / Spring Data Redis is vulnerable to SpEL Injection. The vulnerability is due to unsanitized Sort input being evaluated by SpelPropertyComparator, allowing an attacker to inject and execute malicious SpEL expressions...
Unsafe Deserialization
org.springframework.graphql, spring-graphql is vulnerable to Unsafe Deserialization. The vulnerability is due to unsafe deserialization of data when processing paginated GraphQL queries, which allows an attacker to craft a malicious GraphQL request and potentially achieve Remote Code Execution RC...
GO-2025-3777 vulnerabilities
Vulnerabilities for packages: prometheus-podman-exporter, prometheus-podman-exporter-fips...
GHSA-HHRP-GW25-JR43 vulnerabilities
Vulnerabilities for packages: lmcache-cuda-12.8...
GO-2023-1547 vulnerabilities
Vulnerabilities for packages: helm...
GO-2025-4150 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips...
GO-2025-3988 vulnerabilities
Vulnerabilities for packages: gitea-fips, sftpgo, gitea...
GO-2026-5675 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2025-4109 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GO-2023-2068 vulnerabilities
Vulnerabilities for packages: croc...
GO-2023-2072 vulnerabilities
Vulnerabilities for packages: croc...
GO-2026-5617 vulnerabilities
Vulnerabilities for packages: rancher-machine, vault, amazon-cloudwatch-agent-operator, nuclei, rancher, envoy-gateway, docker-credential-gcr-fips, elastic-agent-fips, beats-fips, opentelemetry-operator, grafana, cloudbeat, livekit-cli, upwind-agent, nerdctl-fips, chainloop-control-plane, undock,...
