232334 matches found
CVE-2026-84109 Xinhu Rainrock RockOA webmainAction.php getOrder sql injection
A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of the file webmain/webmainAction.php. Executing a manipulation of the argument highorder can lead to sql injection. The attack can be launched remotely. The exploit has been made...
CVE-2026-84109
A SQL injection vulnerability exists in Xinhu Rainrock RockOA versions up to 2.7.6 . The flaw resides in the getOrder function of webmain/webmainAction.php , where manipulation of the highorder argument can be exploited remotely with low privileges and no user interaction. The CVSS 3.1 base score...
EUVD-2026-69012
A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The...
Exploit for Code Injection in Langflow
CVE-2026-0768 Donate Help maintain this pr...
CVE-2026-83772
A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function csetreportsdecode of the file mail-report.sh of the component JSON Parsing. The manipulation of the argument sender/recipients results in command injection. It is...
EUVD-2026-68984
A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function csetreportsdecode of the file mail-report.sh of the component JSON Parsing. The manipulation of the argument sender/recipients results in command injection. It is...
CVE-2026-83772 Cobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c_set_reports_decode command injection
A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function csetreportsdecode of the file mail-report.sh of the component JSON Parsing. The manipulation of the argument sender/recipients results in command injection. It is...
xss-vulnerability-demo
xss-vulnerability-...
Exploit for Incorrect Authorization in Canonical Ubuntu_Linux
CVE-2021-34...
EUVD-2026-68885
A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function checkimgtype of the file admin/pack.php. Executing a manipulation of the argument packimg can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to th...
EUVD-2026-68895
A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the file packages/server/src/utils/traefik/application.ts of the component Settings. The manipulation of the argument path results in path traversal. The attack can be launched...
puncia v0.36
PantheraP.uncia Official CLI utility for Subdomain Center & Exploit Observer Puncia is the official command-line client for two A.R.P. Syndicate intelligence APIs — point it at a domain, a brand, or a vulnerability ID and get structured JSON back in seconds, no browser required: 🕸️ Subdomain Cente...
PT-2026-84113
A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the component Vendor Portal Profile Update. Executing a manipulation of the argument vendor contact can lead to authorization bypass. The attack may be performed...
PT-2026-84534
Name of the Vulnerable Software and Affected Versions Casdoor versions prior to 4.0.0 Description An issue exists in the upload-resource API within the controllers/resource.go file. This flaw allows remote attackers to bypass authentication, leading to missing authentication for the affected...
ASB-A-522376080
In stpropnciprocessstd of stpropncistd.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-511554776
In mfwresourcesetaccessbyperm of resources.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
java-1_8_0-openj9-1.8.0.504-1.1 on GA media (moderate)
java-180-openj9-1.8.0.504-1.1 on GA media Announcement ID: openSUSE-SU-2026:11641-1 Rating: moderate Cross-References: CVE-2026-70906 CVE-2026-70907 CVSS scores: CVE-2026-70906 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-70907 SUSE : 5.3...
PT-2026-84520
Name of the Vulnerable Software and Affected Versions NousResearch hermes-agent versions prior to 0.18.3 Description A flaw in the MCP Tool component allows for uncontrolled memory allocation. This issue occurs within the list tools function located in the tools/mcp tool.py file and can be...
PUB-A-513140159
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...