Lucene search
+L

4825 matches found

NVD
NVD
added 2026/09/10 7:17 a.m.5 views

CVE-2026-0303

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

6.3CVSS0.00128EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/09/10 6:03 a.m.7 views

EUVD-2026-75269

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

6.3CVSS0.00128EPSS
SaveExploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/09/09 9:18 p.m.11 views

Security Bulletin: ACE vulnerability in conditional configuration file processing by QOS.CH logback-core

Summary Upgrade to new jsonListener.jar Vulnerability Details CVEID:CVE-2026-13006 DESCRIPTION: ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.36 in Java applications, allows an attacker to execute arbitrary code circumventing...

7CVSS0.00175EPSS
SaveExploits0Affected Software1
Palo Alto Networks
Palo Alto Networks
added 2026/09/09 4:00 p.m.8 views

Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file. Work around: Until a fixed version is deployed, avoid running Checkov over untrusted content, an...

6.3CVSS0.00128EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/09 10:05 a.m.8 views

CVE-2023-5961

此仓库包含一个 Python 脚本和一个 nuclei 模板,旨在检测 Moxa ioLogik 设备中的漏洞,特别关注 CVE-2023-5961 漏洞。此外,它还提供了有关该漏洞和相关安全公告的信息。 漏洞信息 CVE 编号:CVE-2023-5961 安全公告:Moxa 安全公告 MPSA-235250 该安全公告详细描述了影响 Moxa ioLogik E1200 系列 Web 服务器的漏洞,可能导致未经授权的访问或其他安全问题。...

8.8CVSS7.8AI score0.00373EPSS
SaveExploits1
Nuclei
Nuclei
added 2026/09/09 2:52 a.m.1941 views

Gitea 1.1.0 - 1.12.5 - Remote Code Execution

Gitea 1.1.0 through 1.12.5 is susceptible to authenticated remote code execution, via the git hook functionality, in customer environments where the documentation is not understood e.g., one viewpoint is that the dangerousness of this feature should be documented immediately above the...

7.2CVSS8.1AI score0.95357EPSS
SaveExploits11References5
EUVD
EUVD
added 2026/09/09 12:00 a.m.8 views

EUVD-2026-75162

An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...

0.00238EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 7:20 p.m.6 views

CVE-2026-85384

A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...

8.5CVSS0.0021EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/07 11:16 p.m.6 views

CVE-2026-86540

knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary binaries by crafting a malicious .knowns/config.json file. When a repository with a crafted configuration is opened, the unvalidated binar...

8.5CVSS0.00145EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/07 11:03 p.m.16 views

CVE-2026-86540

Knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files. An attacker who crafts a malicious .knowns/config.json file in a repository can cause the unvalidated binary path to be executed twice under the user's account with no verificati...

8.5CVSS6.4AI score0.00145EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/07 4:13 p.m.9 views

TP-Link-ArcherC5-RCE

TP-Link Archer C5 通过恶意配置文件上传实现认证远程代码执行 CVE-2018-19537 描述 TP-Link Archer C5 路由器的所有已发布固件版本中存在一个经过认证的远程代码执行(RCE)漏洞。通过上传精心制作的配置文件,攻击者可以注入以 root 权限运行的 OS 命令。 Archer C5 路由器允许管理用户将当前配置参数保存到文件,并从文件恢复参数。当用户尝试在 Web GUI 中设置这些参数时,它们似乎经过了适当的净化处理。然而,当从配置文件中设置这些参数时,它们并未得到适当的净化。特别是,我们通过上传配置文件中的 wandynhostname 1...

9CVSS7.3AI score0.05984EPSS
SaveExploits1
EUVD
EUVD
added 2026/09/05 12:31 a.m.6 views

EUVD-2026-71776

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, without line-ending sequences being...

9.6CVSS5.5AI score0.00671EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/04 10:17 p.m.9 views

CVE-2026-75925

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, without line-ending sequences being...

9.6CVSS0.00671EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/04 9:19 p.m.36 views

CVE-2026-75925 IXON VPN Client CRLF Injection

Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, without line-ending sequences being...

9.6CVSS0.00671EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/04 9:19 p.m.48 views

CVE-2026-75925

IXON VPN Client versions prior to 1.4.7 contain a CRLF injection vulnerability (CWE-93, with contributing CWE-306) that enables remote code execution with root or SYSTEM privileges . The local configuration service accepts changes without authenticating the requester and writes values to a file l...

9.6CVSS5.5AI score0.00671EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/04 2:32 p.m.31 views

CVE-2026-85674 aider 0.86.2 Remote Code Execution via .aider.conf.yml

aider aider-chat automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd executed at startup or lint-cmd executed on the first file edit, which aider runs through a shell subprocess with shell=True witho...

8.5CVSS0.00164EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/04 2:32 p.m.7 views

EUVD-2026-71130

aider aider-chat automatically loads a .aider.conf.yml configuration file from the root of the git repository it is launched in. A crafted repository can set test-cmd executed at startup or lint-cmd executed on the first file edit, which aider runs through a shell subprocess with shell=True witho...

8.5CVSS5.6AI score0.00164EPSS
SaveExploits0References4
Veeam
Veeam
added 2026/09/03 12:00 a.m.17 views

After Veeam ONE 13.1.0.7034 Upgrade: No connection could be made because the target machine actively refused it. (localhost:2743)

Article Applicability The issue described in this article only occurs for deployments in which Veeam ONE was installed to a folder other than the default C:\Program Files\Veeam\Veeam ONE\ path. Challenge After Veeam ONE is upgraded to version 13.1 build 13.1.0.7034, reports cannot be generated an...

5.5AI score
SaveExploits0Affected Software1
CVE
CVE
added 2026/09/01 12:57 a.m.43 views

CVE-2026-18743

popt (specifically the poptConfigFileToString function in popt-static/popt-devel) contains a short realloc bug that can cause heap metadata corruption when a host loads specially crafted configuration content. Successful exploitation results in a low-impact denial of service due to process unavai...

2.5CVSS5.8AI score0.00141EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/31 3:26 p.m.7 views

EUVD-2026-68609

The affected Ebyte product exports administrative credentials and other sensitive configuration information without adequate protection. An unauthenticated attacker on the adjacent network who can obtain an exported configuration file could recover valid credentials and use them to access the...

7.1CVSS5.9AI score0.00181EPSS
SaveExploits0References2
Rows per page
Query Builder