jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the...

CVE-2014-4688-pfsense

CVE-2014-4688 – Inyección de Comandos en pfSense Prueba de concepto modificada de Exploit-DB para CVE-2014-4688 inyección de comandos en pfSense statusrrdgraphimg.php Resumen Este repositorio contiene una versión modificada de la prueba de concepto original de Exploit-DB para CVE-2014-4688 , que...

EUVD-2026-75597

OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data. The vulnerability affects versions of the...

CVE-2026-65639

ConfigServer Security & Firewall (CSF) is vulnerable to OS command injection in its advanced-rule parser . An attacker who controls a configured allow/deny feed can inject commands that execute with root privileges , due to insufficient validation of feed-supplied rule data. The vulnerability aff...

CVE-2026-65639

OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data. The vulnerability affects versions of the...

CVE-2019-25485

🐞 CVE-2019-25485: R 3.4.4 - Desbordamiento de Búfer Basado en Pila x86 y x64 Desbordamiento de búfer basado en pila en R 3.4.4. Explotación completa en x86, pero solo control de RIP con análisis de gadgets en x64 debido a restricciones del programa. La misma vulnerabilidad en dos arquitecturas, l...

Project-CVE-2026-75604

Next.js Windows Cache Traversal Security Research Defensive security research and authorized validation only. This repository concerns CVE-2026-75604 , a critical vulnerability that may permit unauthenticated remote code execution on certain Windows-hosted Next.js deployments. Credits Coded by:...

CVE-2026-88047

Tesseract (open-source OCR engine), versions 5.5.3 and earlier , is affected by a stack buffer overflow in Classify::ReadNormProtos (src/classify/normmatch.cpp). The function parses the NORMPROTO component of a .traineddata file using std::istream::operator>>(char*) into a fixed 61-byte sta...

CVE-2026-81468

Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-81467

Dell ThinOS 10, versions prior to 260510. 2616, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2026-81048

Dell ThinOS 10, versions prior to 260510.2616, contain an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote Code execution...

CVE-2026-81049

Dell ThinOS 10, versions prior to 260510.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2026-81052

Dell ThinOS 10, versions prior to 260510.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2026-81046

Dell ThinOS 10, versions prior to 260510.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Arbitrary Code Execution within the application context...

CVE-2019-11043

CVE-2019–11043: Vulnerabilidad de ejecución remota de código en PHP-FPM Nginx Descripción de la vulnerabilidad e impacto CVE-2019–11043 es una vulnerabilidad de ejecución remota de código RCE. Afecta a PHP-FPM, que es un administrador de procesos FastCGI comúnmente utilizado con servidores web...

CVE-2025-32433-available-for-windows

CVE-2025-32433 Información sobre la vulnerabilidad: https://nvd.nist.gov/vuln/detail/CVE-2025-32433 POC root@kitploit: kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage: cve-2025-32433.py -h -d --host HOST --port PORT Exploit for CVE-2025-32433 Erlang OTP SSH server...

CVE-2026-79987 Low-privilege RCE through element-search eager loading

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker...

EUVD-2026-75586

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker...

CVE-2026-79987

CVE-2026-79987 is a low-privilege remote code execution vulnerability in Craft CMS , exploitable by a remote, authenticated, non-admin Control Panel user holding only the accessCp permission. The root cause involves element-search eager loading , allowing the attacker to execute operating system ...

CVE-2026-5027

🔥 CVE-2026-5027 - Path Traversal en Langflow Escritura Arbitraria de Archivos a RCE Ejecución Remota de Código No Autenticada mediante Subida de Archivos -orange?style=for-the-badge 📌 Descripción General Langflow sufre una vulnerabilidad crítica de path traversal en el endpoint de subida de...