Lucene search
+L

1114150 matches found

EUVD
EUVD
added yesterday4 views

EUVD-2026-56021

A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with the Developer role to execute arbitrary OS commands by exploiting a PHP-Sandbox allow-list bypass. The sandbox allow-list permits functions that transitively invoke system, enabling a developer to escape th...

8.8CVSS6.6AI score
SaveExploits0References1
CVE
CVE
added yesterday14 views

CVE-2026-72551

CVE-2026-72551 affects Apioo Fusio 8.8.3. A remote code execution flaw arises from a PHP-Sandbox allow-list bypass that permits functions transitively invoking system(), enabling an authenticated Developer-role user to escape the sandbox and run arbitrary OS commands on the server, potentially ac...

8.8CVSS6.6AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday14 views

CVE-2026-72551 Apioo Fusio - Remote Code Execution

A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with the Developer role to execute arbitrary OS commands by exploiting a PHP-Sandbox allow-list bypass. The sandbox allow-list permits functions that transitively invoke system, enabling a developer to escape th...

8.8CVSS
SaveExploits0References1
CVE
CVE
added yesterday15 views

CVE-2026-72550

CVE-2026-72550 : In Friendica (through the 2026.08-dev branch) an unauthenticated attacker can cause arbitrary SQL execution via the photo-view order parameter. The parameter is concatenated unescaped into a SHOW COLUMNS query through a bare PDO::query() call, enabling stacked statement injection...

9.8CVSS6.1AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday15 views

CVE-2026-72538 PrefectHQ Prefect - Argument Injection

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...

8.8CVSS
SaveExploits0References1
CVE
CVE
added yesterday15 views

CVE-2026-72538

CVE-2026-72538 affects PrefectHQ Prefect up to version 3.8.2. An argument injection flaw occurs in the git_clone pull step where the branch field is passed directly to git pull without sanitization, enabling an authenticated user to achieve remote code execution on the Prefect server. The issue i...

8.8CVSS6.3AI score
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-56008

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...

8.8CVSS6.3AI score
SaveExploits0References1
CVE
CVE
added yesterday28 views

CVE-2026-58231

Technical details about CVE-2026-58231 are not publicly available in the provided documents. Monitor for updates.

10CVSS6AI score
SaveExploits0References2
EUVD
EUVD
added yesterday5 views

EUVD-2026-55999

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

10CVSS6AI score
SaveExploits0References2
Cvelist
Cvelist
added yesterday16 views

CVE-2026-58231 Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

10CVSS
SaveExploits0References2
NVD
NVD
added yesterday5 views

CVE-2026-15560

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...

8.1CVSS0.00343EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-73154

A flaw was found in svxlink. A stack overflow in the StationData::setData function can be triggered by specially crafted input data, potentially allowing a remote attacker to crash the application or achieve arbitrary code execution. Mitigation Update svxlink to version 26.05.1 or later...

5.7AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-73150

A flaw was found in svxlink's LocationInfo/APRS functionality. The updateQsoStatus function in AprsTcpClient.cpp formats a remote EchoLink station's callsign and info string into a fixed 80-byte stack buffer using sprintf without length checks. A remote attacker controlling an EchoLink station ca...

5.6AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added yesterday2 views

CVE-2026-73148

A flaw was found in svxlink's svxreflector component. A dangling Json::Value reference is written to after the underlying storage is replaced upon receiving repeated MsgNodeInfo messages. This use-after-free write can lead to a crash or potentially arbitrary code execution. Mitigation Update...

5.6AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added yesterday2 views

CVE-2026-73146

A flaw was found in svxlink's svxreflector component. A reentrant client deletion triggered via a sendError write-failure path leads to a use-after-free on the client object. A remote attacker can trigger this condition to crash the reflector server or potentially achieve arbitrary code execution...

5.8AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added yesterday3 views

CVE-2026-68201

A flaw was found in the ALSA Advanced Linux Sound Architecture timer component of the Linux kernel. When a master timer instance is closed, it does not properly ensure that all associated slave timer callbacks have finished executing before detaching them. This oversight can lead to a...

7CVSS5.8AI score0.00209EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added yesterday5 views

CVE-2026-15560

when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in the server JVM before EJB security interceptors run...

8.1CVSS5.5AI score0.00343EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-15555

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...

8.8CVSS5.4AI score0.00235EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added yesterday10 views

Security Bulletin: IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution (CVE-2026-13476)

Summary IBM Informix versions 14.10 and 15.0 are vulnerable to an unauthenticated Remote Code Execution RCE vulnerability in the IBM Informix Wire Listener. Vulnerability Details CVEID:CVE-2026-13476 DESCRIPTION: IBM Informix could allow an unauthenticated user to execute arbitrary commands with...

5.9AI score
SaveExploits0Affected Software1
OSV
OSV
added yesterday4 views

MAL-2026-13729 Malicious code in dlmm-sdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ddf2d03d839f7eff709e78da1d6a85226cdd3b9171dbcb59a4a95c741e0773e The package's top-level module runs a report routine on import, and setup.py invokes the same import at install time. The routine collects environmen...

5.4AI score
SaveExploits0References2
Rows per page
Query Builder