Lucene search
K

12374 matches found

Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.9 views

PT-2026-43242

Name of the Vulnerable Software and Affected Versions KubeVirt affected versions not specified Description A flaw in the virt-handler component allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper symlink validation when connecting to virtual...

9.9CVSS5.2AI score0.00544EPSS
Exploits0References36
The Hacker News
The Hacker News
added 2026/05/25 2:13 p.m.23 views

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

Monday recap. Same mess, new week. A sketchy dev tool got people pwned, old bugs came back from the dead, and security products somehow needed protecting from themselves. A bunch of companies spent the week checking old boxes and forgotten servers they should've patched years ago. Good times...

7.1CVSS7AI score0.01527EPSS
Exploits5
NVD
NVD
added 2026/05/25 4:16 a.m.14 views

CVE-2026-8652

An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network...

8.5CVSS0.0102EPSS
Exploits0References1
CVE
CVE
added 2026/05/25 2:23 a.m.18 views

CVE-2026-8652

CVE-2026-8652 describes an OS Command Injection in the product Aterm . The issue allows an attacker who already has administrator access to the product’s web console to execute arbitrary OS commands via the adjacent network, enabling high-severity impact on confidentiality, integrity, and availab...

8.5CVSS6AI score0.0102EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/25 2:23 a.m.31 views

CVE-2026-8652

An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network...

8.5CVSS0.0102EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/25 2:23 a.m.11 views

EUVD-2026-31620

An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network...

8.5CVSS6AI score0.0102EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/25 2:23 a.m.9 views

CVE-2026-8652

An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network...

8.5CVSS6AI score0.0102EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/25 2:23 a.m.8 views

CVE-2026-8652

An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network...

8.5CVSS6AI score0.0102EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.10 views

PT-2026-42994

An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjacent network...

8.5CVSS6AI score0.0102EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.7 views

NEC Aterm 安全漏洞

NEC Aterm is a series of wireless routers from Nippon Electric NEC. A security vulnerability exists in NEC Aterm that stems from an OS command injection issue, which could allow execution of arbitrary OS commands over an adjacent network if a malicious third party gains administrator access to th...

8.5CVSS6AI score0.0102EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2026/05/24 5:21 p.m.65 views

ClipBucket-EDB-44250

ClipBucket-EDB-44250 Unauthenticated Remote Code Execution in...

6AI score
Exploits0
NVD
NVD
added 2026/05/23 2:16 p.m.13 views

CVE-2026-9302

A vulnerability was determined in 546669204 vps-inventory-monitoring up to 98c00b370668c96ae75e91c15548d9ea113652d9. This issue affects the function eval of the file app/index/command/VpsTest.php of the component VpsTest Console. Executing a manipulation of the argument vf can lead to code...

6.5CVSS0.00307EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/05/23 1:15 p.m.12 views

CVE-2026-9302 546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection

A vulnerability was determined in 546669204 vps-inventory-monitoring up to 98c00b370668c96ae75e91c15548d9ea113652d9. This issue affects the function eval of the file app/index/command/VpsTest.php of the component VpsTest Console. Executing a manipulation of the argument vf can lead to code...

6.5CVSS0.00307EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/05/23 1:15 p.m.5 views

CVE-2026-9302 546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection

A vulnerability was determined in 546669204 vps-inventory-monitoring up to 98c00b370668c96ae75e91c15548d9ea113652d9. This issue affects the function eval of the file app/index/command/VpsTest.php of the component VpsTest Console. Executing a manipulation of the argument vf can lead to code...

6.5CVSS6.3AI score0.00307EPSS
Exploits0References6
GithubExploit
GithubExploit
added 2026/05/23 9:40 a.m.61 views

Old-Xssconsole-

No d...

5.8AI score
Exploits0
Fedora
Fedora
added 2026/05/23 12:58 a.m.13 views

[SECURITY] Fedora 44 Update: dotnet10.0-10.0.108-1.fc44

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

7.5CVSS5.7AI score0.01177EPSS
Exploits0
Fedora
Fedora
added 2026/05/21 11:21 p.m.10 views

[SECURITY] Fedora 44 Update: cockpit-362-1.fc44

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

8CVSS7AI score0.00799EPSS
Exploits0
NVD
NVD
added 2026/05/21 2:16 p.m.20 views

CVE-2025-71210

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. Please note: although this vulnerability carries a technical critical CVSS rating, this was reported via responsible disclosure via...

9.8CVSS0.04019EPSS
Exploits0References2
NVD
NVD
added 2026/05/21 2:16 p.m.8 views

CVE-2025-71211

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. Please note: although this vulnerabili...

9.8CVSS0.03959EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/21 1:2 p.m.16 views

EUVD-2025-209911

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in scope to CVE-2025-71210 but affects a different executable. Please note: although this vulnerabili...

9.8CVSS7.7AI score0.04019EPSS
Exploits0References2
Rows per page
Query Builder