EUVD-2026-79216

A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker could exploit this vulnerability by providing a specially crafted input to the affected component. Successful exploitation could...

CVE-2026-76690

CVE-2026-76690 affects a component of HPE Networking EdgeConnect SD-WAN Gateways , allowing an authenticated remote attacker to achieve remote code execution as root by supplying a specially crafted input. The CVSS 3.1 score is 7.2 (HIGH) , with low attack complexity, no user interaction, and hig...

CVE-2026-76689

CVE-2026-76689 affects HPE Networking EdgeConnect SD-WAN Gateways , where a stack-based buffer overflow exists in the configuration processing logic. An authenticated remote attacker with administrative privileges can exploit the vulnerability by supplying specially crafted configuration data tha...

EUVD-2026-79215

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafted configuration data. Successful...

EUVD-2026-79213

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges o...

CVE-2026-76687

HPE Networking EdgeConnect SD-WAN Orchestrator is affected by a vulnerability in its API endpoint involving an authenticated arbitrary file write that can lead to remote code execution . A low-privilege authenticated remote attacker can exploit this flaw to escalate privileges and execute arbitra...

EUVD-2026-79211

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE Este repositorio contiene mi código de exploit para la vulnerabilidad RCE en Adobe ColdFusion 2021. Descripción del Exploit El exploit envía una solicitud POST que contiene un reverse shell JSP a /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm...

CVE-2026-76685

CVE-2026-76685 affects HPE Networking EdgeConnect SD-WAN Gateways in the proxy packet processing logic , where improper handling of malformed or truncated input triggers an integer overflow that escalates to a buffer overflow . An unauthenticated remote attacker can send specially crafted input t...

CVE-2026-76683

HPE Networking EdgeConnect SD-WAN Gateways contain buffer overflow vulnerabilities in their API endpoint that allow an unauthenticated remote attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise . Exploitation requires certain preconditi...

EUVD-2026-79209

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation...

EUVD-2026-79208

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...

CVE-2026-76682

CVE-2026-76682 affects HPE Networking EdgeConnect SD-WAN Gateways , specifically the network security monitoring component of its intrusion detection systems. The root cause is a limited buffer overflow that an unauthenticated remote attacker can exploit over the network. Successful exploitation ...

EUVD-2026-79204

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on th...

CVE-2026-76678

HPE Networking EdgeConnect SD-WAN Gateways are affected by an authenticated command injection vulnerability in the API endpoint . A low-privilege, authenticated remote attacker can exploit this to escalate privileges and execute arbitrary system commands with root privileges on the underlying ope...

CVE-2026-76676

HPE EdgeConnect SD-WAN Gateways are affected by buffer overflow vulnerabilities in the underlying operating system that can be exploited by an unauthenticated attacker on an adjacent network with low complexity and no user interaction. Successful exploitation allows execution of arbitrary code as...

EUVD-2026-79202

Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attack...

CVE-2026-76674

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways , enabling an unauthenticated remote attacker to execute arbitrary code. Successful exploitation grants an attacker the ability to run arbitrary commands on the underlying OS, re...

EUVD-2026-79200

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying...

CVE-2025-59528.yaml

CVE-2025-59528.yaml Flowise 是一个拖放式用户界面，用于构建自定义的大语言模型流程。在 3.0.5 版本中，Flowise 存在远程代码执行漏洞。CustomMCP 节点允许用户输入用于连接外部 MCP 服务器的配置设置。该节点解析用户提供的 mcpServerConfig 字符串以构建 MCP 服务器配置。然而，在此过程中，它会在没有任何安全验证的情况下执行 JavaScript 代码。具体来说，在 convertToValidJSONString 函数内部，用户输入被直接传递给 Function 构造函数，该构造函数会将输入作为 JavaScript...