CVE-2026-77540

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

CVE-2026-77539

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device...

CVE-2026-77539

CVE-2026-77539 is a critical (CVSS 9.1) Improper Input Validation vulnerability in Ubiquiti UniFi OS Server . An attacker with network access and high privileges can exploit it to perform Command Injection on the host device, leading to high impact on confidentiality, integrity, and availability ...

CVE-2026-77535

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...

CVE-2026-77535

CVE-2026-77535 is an Improper Input Validation vulnerability in UniFi Network Application that allows a network-based, high-privilege actor to achieve Command Injection on an adopted device. The CNA-assigned CVSS 3.1 score is 9.1 (Critical) with a Changed Scope and High impact across Confidential...

CVE-2026-9668 SQL injection vulnerability in ZTE SCP product

With legitimate user credentials in hand, attackers can construct malicious SQL statements to bypass authentication logic and execute arbitrary database queries directly. This will consequently lead to slow database queries and expanded query coverage. This vulnerability features a low exploitati...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 Divulgazione di informazioni non autenticate di Joomla Description Supporto per rilevamento ad alta concorrenza Scrivere url in urls.txt, supporta solo il formato http://ip:port & https://ip:port Usare il parametro -p per aggiungere un proxy Basta eseguire Usage Help...

CVE-2026-8054

1. Panoramica della vulnerabilità CVE-2026-8054 è una vulnerabilità di SQL Injection pre-autenticazione ad alto rischio Pre-auth SQL Injection presente nell'API di Audit delle Pubblicazioni Publish Audit API di dotCMS Core. Il bug è stato tracciato ufficialmente come incidente di sicurezza SI-75...

CVE-2024-38063-

CVE-2024-38063- Sfruttare da remoto il kernel tramite IPv6 CVE-2024-38063 - Sfruttare da remoto il kernel tramite IPv6 Marcus Hutchins Dall'ultimo aggiornamento di Windows rilasciato il 13 agosto, mi sono immerso a fondo in tcpip.sys il driver del kernel responsabile della gestione dei pacchetti...

CVE-2021-40859

CVE-2021-40859 Exploit dei backdoor Auerswald COMpact 8.0B Informazioni Sono stati scoperti backdoor nei dispositivi Auerswald COMpact 5500R 7.8A e 8.0B, che consentono agli aggressori con accesso all'applicazione di gestione basata sul web un accesso amministrativo completo al dispositivo...

CVE-2021-44228-DFIR-Notes

CVE-2021-44228 DFIR-Notes घर जाते समय मुझे log4shell कमजोरी के बारे में पहले संदेश मिलने शुरू हुए। Apache Log4j 2 उपयोगिता के कई संस्करणों को प्रभावित करने वाली एक उच्च गंभीरता वाली कमजोरी CVE-2021-44228 9 दिसंबर, 2021 को प्रोजेक्ट के GitHub के माध्यम से सार्वजनिक रूप से प्रकाशित की गई थी। यह...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

Zoho ManageEngine OpManager - SQL Injection

Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentication for /oputilsServlet requests, as demonstrated by a /oputilsServlet?action=getAPIKey request that can be leveraged against Firewall Analyzer to add an admin user via /api/json/v2/admin/addUser or conduct a SQL...

VMware Aria Operations for Networks - Remote Code Execution

Aria Operations for Networks contains an authenticated deserialization vulnerability. A malicious actor with network access to VMware Aria Operations for Networks and valid 'member' role credentials may be able to perform a deserialization attack resulting in remote code execution. id:...

DELMIA Apriso - Broken Access Control

DELMIA Apriso Release 2020 through Release 2025 contains a broken access control vulnerability caused by missing authorization, letting attackers gain privileged access to the application, exploit requires no special conditions. id: CVE-2025-6205 info: name: DELMIA Apriso - Broken Access Control...

PT-2026-82256

Name of the Vulnerable Software and Affected Versions Dell Cloud Disaster Recovery versions prior to 20.3 Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. A high privileged attacker with remote access could exploit this fla...

CVE-2026-22012-Diameter-Protocol-Credit-Control-Bypass-in-5G

CVE-2026-22012 – Diameter-Protokoll Credit‑Control-Bypass in 5G Programmcode Python-Diameter-Sim root@kitploit: diametercreditcontrolsim.py - Simulated OCS with missing final-unit indication class OCS: def processCCRself, request: Vulnerability: always returns SUCCESS with same quota, never sends...

DEBIAN-CVE-2026-79257

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-79212

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-79195

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...