452517 matches found
EUVD-2026-94284
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation...
EUVD-2026-94283
Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges coul...
CVE-2026-92531 Improper Neutralization of Special Elements used in an OS Command in BugTracker.NET
Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges coul...
CVE-2026-92531
BugTracker.NET contains an operating system command injection vulnerability in its SVN integration component . The application fails to properly validate the repository field value before incorporating it into an svn.exe command. An authenticated user with administrator privileges can store manip...
Exploit for CVE-2026-13043
🕷️ CVE-2026-13043 - Panda / WatchGuard Kernel Memory Access...
EUVD-2026-94282
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product...
CVE-2026-103668
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product...
CVE-2026-96408
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product...
CVE-2026-96408
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product...
CVE-2026-96408
A code injection vulnerability exists in the upgrade script of Movable Type . This flaw could enable an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product. No specific exploit information or remediation versions are provided in the documents.
CVE-2026-97146
Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod. If the pod has the label 'app=yunikorn' the checks limiting the user annotation content are not run. The label is used to identify the YuniKorn application itself in the...
USN-8893-1: Libwebsockets vulnerabilities
It was discovered that libwebsockets did not properly validate user-supplied data when parsing HTTP/2 HPACK path headers, which could result in a write past the end of an allocated buffer. An attacker could possibly use this issue to execute arbitrary code. CVE-2026-19773 It was discovered that...
CVE-2023-47268
Esecuzione Arbitraria di Codice in PrusaSlicer Escalation dei privilegi utilizzando un file .3mf con una versione vulnerabile di prusaslicer. Assicurati di poter eseguire prusaslicer con sudo. Linux 1.Scarica i file 2.Modifica IP e PORT in exploit.sh 3.Assicurati di avere exploit.sh nella directo...
ghostlock-sabrina
GhostLock Sabrina Root exploit for Chromecast with Google TV sabrina via CVE-2026-43499 -- a use-after-free in the Linux kernel's futex PI priority inheritance subsystem. Achieves root on a locked bootloader device running Android 14 with kernel 5.15.170 PGO+BOLT+LTO, clang 17. The vulnerability...
SmartAsset-CORS-CVE-2020-26527
SmartAsset-CORS-CVE-2020-26527 CVE-2020-26527 Smart Asset - versione 2020.7 È stato scoperto un problema in API/api/Version in Damstra Smart Asset 2020.7. Il cross-origin resource sharing si fida di origini casuali accettando l'intestazione arbitraria 'Origin: example.com' e rispondendo con 200 O...
ace-vim-neovim
ace-vim-neovim Esecuzione arbitraria di codice in Vim/Neovim tramite Modelines CVE-2019-12735 Utilizzo 1. ascolta nc -vlp 9999 2. ace vim pocshell.txt E poi, il tuo localhost otterrà una shell...
CVE-2026-58068
This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system...
CVE-2026-107104
This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable functionality of the targeted system. Successf...