2891582 matches found
Kramer VIAware - Privilege Escalation and Remote Code Execution
Kramer VIAware, all tested versions, allow privilege escalation and remote code execution due to misconfigured sudo permissions. Attackers can execute arbitrary system commands remotely if the web interface is accessible, due to vulnerabilities in the handling of privileged operations through...
Optergy Proton/Enterprise - Unauthenticated RCE via Backdoor Console
Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console. id: CVE-2019-7276 info: name: Optergy Proton/Enterprise - Unauthenticated RCE via Backdoor Console author: daffainfo severity: critical description: | Optergy Proton/Enterprise devices allow Remote Root Cod...
Online Fire Reporting System v1.0 - SQL injection
Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteinquiry. id: CVE-2022-31978 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: critical description: | Online Fire Reporting System v1.0 is vulnerable to...
NEX-Forms Plugin < 7.9.7 - SQL Injection
The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before using it in SQL statements, leading to SQL injections. The attack can be executed by anyone who is permitted to view the forms statistics chart, by default administrators, however can be configured...
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the indexFile component. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch oth...
CVE-2026-56619
CVE-2026-56619 affects HCL BigFix Mobile. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability caused by insufficient validation and output encoding of user-controlled input. The CVSS v3.1 base score is 5.4 (Medium) with Network attack, Low attack complexity, Privileges Required: Low...
CVE-2026-19429
creationtimestamp| type| source ---|---|--- 2026-08-10 15:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqgt4gzcu2u 2026-08-10 23:53:23+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3msrcbmtv622n...
ROOT-OS-DEBIAN-13-CVE-2026-32327 CVE-2026-32327 in apr-util - Patched by Root
Root has patched CVE-2026-32327 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-49506 CVE-2025-49506 in apr-util - Patched by Root
Root has patched CVE-2025-49506 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
CVE-2026-62737
creationtimestamp| type| source ---|---|--- 2026-08-10 15:11:48+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3msqf4xn2vq2z 2026-08-10 18:00:38+00:00| seen| https://infosec.exchange/users/wdormann/statuses/117072516662642127 2026-08-10 18:01:05+00:00| seen|...
CVE-2026-72529
creationtimestamp| type| source ---|---|--- 2026-08-10 15:00:03+00:00| seen| https://t.me/bdufstecru/3371 2026-08-11 00:00:07+00:00| seen| https://t.me/bdufstecru/3371...
CVE-2026-59112
creationtimestamp| type| source ---|---|--- 2026-08-10 14:55:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fregeurs5cb77...
CVE-2026-16742
creationtimestamp| type| source ---|---|--- 2026-08-10 14:44:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/h3m34y2x7qkm4...
CVE-2026-63106
creationtimestamp| type| source ---|---|--- 2026-08-10 14:38:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cyh6xh3yaf7nf 2026-08-10 14:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqdlg4my525 2026-08-10 16:01:07+00:00| seen|...
CVE-2026-72761 Webhook SSRF guard bypassed by IPv6 transition addresses (NAT64/6to4/Teredo pass is_global check) in vulnerability-lookup
The webhook URL validator in website/notifications/webhooks.py uses ip.isglobal to reject non-public addresses after DNS resolution. IPv6 transition addresses NAT64 64:ff9b::/96, 6to4 2002::/16, Teredo 2001:0000::/32 are classified as globally routable by IANA, so isglobal returns True even when...
Exploit for Improper Input Validation in Widgetfactorylimited Jce
CVE-2026-65891 — Joomla JCE Rename PoC Proof-of-concept scann...
CVE-2026-72751
CTI-Transmute is affected by a stored cross-site scripting XSS vulnerability in the conversion graph used to visualise converted MISP and STIX content. Attacker-controlled values originating from converted CTI data were passed to multiple HTML-parsing sinks in the graph user interface without...
