Lucene search
+L

517395 matches found

Kitploit
Kitploit
added 2026/09/02 2:42 p.m.4 views

CVE-2026-35196

CVE-2026-35196 · Chamilo LMS · OS 명령 삽입 → RCE 연구자: K 공개 유형: 책임 있는 공개 상태: 패치됨 영향받는 제품: Chamilo LMS 2.0 v1.11.32에서 확인됨...

8.8CVSS5.9AI score0.0176EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/09/02 2:37 p.m.12 views

EUVD-2026-68800

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload RCE...

8.1CVSS5.9AI score0.00528EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/02 2:37 p.m.5 views

GHSA-GXMJ-R5RF-GGWQ elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

Summary elFinder provides uploadDeny and uploadAllow options in its connector configuration to restrict which MIME types may be uploaded. When uploadDeny includes text/x-php, direct upload of .php, .phtml, and .phar files is correctly blocked. However, the extract command ZIP decompression...

8.1CVSS7.5AI score0.00528EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/09/02 2:37 p.m.9 views

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

Summary elFinder provides uploadDeny and uploadAllow options in its connector configuration to restrict which MIME types may be uploaded. When uploadDeny includes text/x-php, direct upload of .php, .phtml, and .phar files is correctly blocked. However, the extract command ZIP decompression...

8.1CVSS7.5AI score0.00528EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/09/02 2:37 p.m.10 views

EUVD-2026-68816

pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph...

7.1CVSS5.9AI score0.00397EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2026/09/02 2:36 p.m.8 views

pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install

Summary When resolving a package, pnpm uses the resolved manifest name as a raw path segment for the isolated-linker import target. A tarball dependency whose package.json name is a scoped path traversal @x/../../…/ is therefore extracted outside nodemodules, to an attacker-chosen absolute path,...

7.5CVSS6AI score0.00413EPSS
SaveExploits0References9Affected Software1
EUVD
EUVD
added 2026/09/02 2:36 p.m.11 views

EUVD-2026-68883

pnpm: A tarball dependency's manifest name escapes nodemodules → arbitrary file write/overwrite on install...

7.5CVSS5.9AI score0.00413EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/02 2:35 p.m.4 views

CVE-2026-0596-Reproduction

CVE-2026-0596: MLflowエコシステムにおける安全でないデシリアライゼーションによる任意コード実行 mlflow==2.11.1およびmlserver==1.3.5における信頼できないモデル読み込みパイプラインに関連する検証、基礎メカニズム、アーキテクチャ上の脆弱性を詳述した包括的なセキュリティ研究レポート。 ⚠️ 脆弱性インテリジェンス勧告: CVE-2026-0596...

9.6CVSS8.1AI score0.01328EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2026/09/02 2:33 p.m.6 views

CVE-2026-76595

A flaw was found in advisor-backend. Multiple code paths within the application deserialize YAML YAML Ain't Markup Language with an unsafe full Loader, which can instantiate arbitrary Python objects via YAML tags. An unauthenticated remote attacker can exploit this by submitting specially crafted...

6.4AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/09/02 2:33 p.m.7 views

CVE-2026-76594

A flaw was found in advisor-backend. A network-adjacent unauthenticated attacker could exploit a vulnerability in the /private/importcontent/ endpoint, which lacks proper authentication and permission checks. This allows the attacker to overwrite the global Advisor rule, resolution, and playbook...

8.1CVSS6.2AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 2:27 p.m.3 views

CVE-2026-20131

🚨 CVE-2026-20131 | Cisco FMC 严重 RCE 漏洞 Cisco Secure Firewall Management Center 中的未认证远程代码执行 📌 概述 一个严重的预认证 Java 反序列化漏洞 ,允许远程攻击者在 Cisco FMC 设备上实现 root 级代码执行 。 关键信息 属性| 详情 ---|--- 严重程度| 严重 CVSS 评分| 10.0 漏洞类型| Java 反序列化 已被在野利用| 是(勒索软件攻击活动) 补丁可用| 是 ✨ 安全的漏洞检测工具 一个美观、安全且可靠的 CVE-2026-20131 检测工具。 📸 演示 功能特性...

10CVSS8.5AI score0.31231EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/02 2:27 p.m.8 views

CVE-2026-0770

CVE-2026-0770: Langflow execglobals 인증되지 않은 원격 코드 실행 PoC CVE-2026-0770 는 Langflow에 영향을 미치는 인증되지 않은 원격 코드 실행RCE 취약점입니다. 이 결함은 /validate 엔드포인트에 제공된 execglobals 매개변수 처리 중 부적절한 입력 검증으로 인해 발생합니다. 이를 악용하여 공격자는 검증 루틴 중 신뢰할 수 없는 전역 환경을 전달할 수 있으며, root 사용자 컨텍스트에서 원격 코드 실행을 달성합니다. ! 면책 조항 경고: 이 도구는 승인된 보안...

9.8CVSS8.1AI score0.63417EPSS
SaveExploits9
RedHat Linux
RedHat Linux
added 2026/09/02 2:26 p.m.7 views

kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle

A flaw was found in the Linux kernel's networking scheduler. A race condition, which is a problem that occurs when multiple operations try to access the same resource at the same time, exists when network filter operations are run concurrently. This can lead to a Use-After-Free UAF vulnerability,...

7.8CVSS6.2AI score0.00241EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/02 2:24 p.m.5 views

-Limesurvey-RCE-CVE-2021-44967

🚀 LimeSurvey RCE CVE-2021-44967 - 認証済みリモートコード実行 このリポジトリには、LimeSurvey の認証済みリモートコード実行脆弱性 CVE-2021-44967 の実用的なエクスプロイトが含まれています。 🎯 互換性 テスト済みで動作確認済み: LimeSurvey 5.2.x LimeSurvey 6.x 🐛 脆弱性の概要 この脆弱性により、管理者権限を持つ認証済みユーザーが悪意のあるプラグインをアップロードできます。LimeSurvey...

9CVSS7.9AI score0.13502EPSS
SaveExploits3
OSV
OSV
added 2026/09/02 2:20 p.m.6 views

GHSA-QXC2-J82W-R537 Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

7.8CVSS5.9AI score0.00154EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/02 2:20 p.m.11 views

EUVD-2026-56923

Faker: helpers.fake exploitable into arbritary code execution...

7.8CVSS6.2AI score0.00154EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/09/02 2:20 p.m.11 views

Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

7.8CVSS5.9AI score0.00154EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/09/02 2:16 p.m.34 views

CVE-2026-77009 WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console

The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server...

9.9CVSS0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/02 2:16 p.m.7 views

CVE-2026-77009 WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console

The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server...

9.9CVSS6.1AI score0.00288EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 2:16 p.m.8 views

EUVD-2026-70039

The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server...

9.9CVSS6.1AI score0.00288EPSS
SaveExploits0References1
Rows per page
Query Builder