Lucene search
+L

882 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/27 9:12 a.m.6 views

CVE-2026-24827

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

7.5CVSS5.9AI score0.00263EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/27 9:12 a.m.27 views

EUVD-2026-4827

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

7.5CVSS5.9AI score0.00263EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/27 9:12 a.m.5 views

CVE-2026-24827 Out-of-bounds write in Commander-Genius

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

7.5CVSS5.9AI score0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/27 9:12 a.m.38 views

CVE-2026-24827 Out-of-bounds write in Commander-Genius

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

7.5CVSS0.00263EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/27 9:12 a.m.8 views

CVE-2026-24827 Out-of-bounds write in Commander-Genius

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

7.5CVSS5.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.20 views

PT-2026-4902

Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge...

7.5CVSS5.9AI score0.00263EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/27 12:0 a.m.11 views

Commander Genius security vulnerabilities

Commander Genius is a computer game developed by Gerhard Stein alone. There is a security vulnerability in Commander-Genius, which stems from an issue of out-of-bound writing...

7.5CVSS5.8AI score0.00263EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:27 a.m.11 views

CVE-2021-33213

An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address...

6.5CVSS6.6AI score0.01304EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:16 a.m.11 views

CVE-2021-0126

Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

8CVSS7.3AI score0.00378EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/01/06 1:46 p.m.6 views

Malicious Package

Overview commander-stable is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/23 8:41 a.m.12 views

Malicious code in space-commander (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
OSV
OSV
added 2025/12/23 8:41 a.m.10 views

MAL-2025-192917 Malicious code in space-commander (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
EUVD
EUVD
added 2025/12/22 1:11 p.m.4 views

EUVD-2025-204717

Malicious code in commander-stable npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/22 1:11 p.m.8 views

Malicious code in commander-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fe1eb016adcd74c343cd1628168fca4112c383c79d2e8580aa81b80a3d162f The package commander-stable was found to contain malicious code. Source: ghsa-malware d960435ff1d49dae38d3390836ed2ea98d8952b423ab906c750127f7c6bc02...

7AI score
SaveExploits0References1
OSV
OSV
added 2025/12/22 1:11 p.m.5 views

MAL-2025-192687 Malicious code in commander-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fe1eb016adcd74c343cd1628168fca4112c383c79d2e8580aa81b80a3d162f The package commander-stable was found to contain malicious code. Source: ghsa-malware d960435ff1d49dae38d3390836ed2ea98d8952b423ab906c750127f7c6bc02...

7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/14 5:3 a.m.15 views

CVE-2025-14508

The MediaCommander – Bring Folders to Media, Posts, and Pages plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the import-csv REST API endpoint in all versions up to, and including, 2.3.1. This is due to the endpoint using uploadfiles capabilit...

6.5CVSS5.2AI score0.00249EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/13 4:16 p.m.8 views

CVE-2025-14508

The MediaCommander – Bring Folders to Media, Posts, and Pages plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the import-csv REST API endpoint in all versions up to, and including, 2.3.1. This is due to the endpoint using uploadfiles capabilit...

6.5CVSS0.00249EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/13 4:31 a.m.19 views

CVE-2025-14508

CVE-2025-14508 : MediaCommander for WordPress allows unauthorized data deletion via the REST API endpoint import-csv due to a missing capability check. The endpoint uses an upload_files (Author-level) check for a destructive operation, enabling authenticated users with Author-level access or high...

6.5CVSS4.8AI score0.00249EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/13 4:31 a.m.39 views

CVE-2025-14508 MediaCommander – Bring Folders to Media, Posts, and Pages <= 2.3.1 - Missing Authorization to Authenticated (Author+) Media Folder Deletion

The MediaCommander – Bring Folders to Media, Posts, and Pages plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the import-csv REST API endpoint in all versions up to, and including, 2.3.1. This is due to the endpoint using uploadfiles capabilit...

6.5CVSS0.00249EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/13 12:0 a.m.6 views

WordPress plugin MediaCommander – Bring Folders to Media, Posts, and Pages 安全漏洞

...

6.5CVSS5.8AI score0.00249EPSS
SaveExploits0References5
Rows per page
Query Builder