334266 matches found
CVE-2026-79850 Authentication Bypass Leading to Remote Code Execution in AOS-8
Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands as root on the underlying...
CVE-2026-79850 Authentication Bypass Leading to Remote Code Execution in AOS-8
Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls and run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands as root on the underlying...
CVE-2026-79849 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...
CVE-2026-79849 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...
CVE-2026-79848 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...
CVE-2026-79848 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...
CVE-2026-79847
CVE-2026-79847 identifies unauthenticated buffer overflow vulnerabilities in AOS-10 that can lead to remote code execution . While the provided documents do not specify the exact affected component or root cause, the vulnerability is rated with a CRITICAL CVSS score of 10.0, indicating high impac...
CVE-2026-79847 Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10
Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged us...
CVE-2026-79847 Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10
Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged us...
CVE-2026-79844 Authentication Bypass Leading to Remote Code Execution in AOS-10
Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute...
CVE-2026-79844 Authentication Bypass Leading to Remote Code Execution in AOS-10
Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
██████╗ ██╗ ██╗██████╗ ██████╗ ███████╗██╗ ██╗███████╗██╗...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — чекер уязвимости PHP2Shell Python 3 Python 3 по...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
Patched PHP 7.4 for Synology DSM 6.2 PHP2Shell Unofficial d...
Exploit for CVE-2026-106173
CVE‑2026‑106173 – FortiSIEM phQueryMaste...
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them, ZDI-CAN-33774, can be triggered before any network authentication. T...
Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays
Impact A vulnerability in applications using App router with Cache Component can lead to remote code execution. The application needs to have a use cache function that returns multiple typed arrays. Workaround There is no known workaround for affected applications with such use cache functions. Y...
GHSA-673Q-MJM6-R5XR Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays
Impact A vulnerability in applications using App router with Cache Component can lead to remote code execution. The application needs to have a use cache function that returns multiple typed arrays. Workaround There is no known workaround for affected applications with such use cache functions. Y...
Prototype Pollution
Overview Affected versions of this package are vulnerable to Prototype Pollution via ambiguous path-key encoding in lib/compiler.js, where the compiler tracked table origins using string-rendered path sets rather than per-object tags. Because quoteDottedString quotes a segment only when it contai...
Prototype Pollution
Overview Affected versions of this package are vulnerable to Prototype Pollution via ambiguous path-key encoding in lib/compiler.js, where the compiler tracked table origins using string-rendered path sets rather than per-object tags. Because quoteDottedString quotes a segment only when it contai...