2090 matches found
CVE-2021-4045
CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N due to insufficient checks on user input in uhttpd, which is one of the main binaries of...
CVE-2024-21534-poc
Vulnerability: CVE-2024-21534 Severity: Critical CVSS Score: 9.8 Description: The jsonpath-plus package versions = 10.0.7 is vulnerable to a Remote Code Execution RCE vulnerability that allows attackers to execute arbitrary code via Node.js's VM module. This vulnerability is caused by insufficien...
CVE-2021-36260-hikvision
CVE-2021-36260 CVE-2021-36260 POC ćÆćäøéØć®Hikvisionč£½åć®Webćµć¼ćć«ćććć³ćć³ćć¤ć³ćøć§ćÆć·ć§ć³ć®čå¼±ę§ć§ććå „åę¤čؼćäøååćŖćććę»ęč ćÆęŖęć®ććć³ćć³ććå«ćć”ćć»ć¼ćøćéäæ”ććććØć§ćć³ćć³ćć¤ć³ćøć§ćÆć·ć§ć³ę»ęćä»ęććććØćć§ćć¾ćć ćØćÆć¹ććć¤ććæć¤ćć«: Hikvision Web Server Build 210702 - ć³ćć³ćć¤ć³ćøć§ćÆć·ć§ć³ ćØćÆć¹ććć¤ćä½č : bashis -- shubtheone ć«ćććØć©ć¼ę“ę° ćć³ćć¼ćć¼ć ćć¼ćø: https://www.hikvision.com/ ćć¼ćøć§ć³...
CVE-2019-19781
ę¬čØäŗćÆćCVE-2019-19781ć«ē»é²ććć¦ććCitrix ADC and Gateway Directory TraversalćŖć¢ć¼ćć³ć¼ćå®č”RCEć«é¢ććčØäŗć§ćć ę¬ćŖć¢ć¼ćć³ć¼ćå®č”čå¼±ę§ćÆć/vpnćć¹é äøć®../vpnsć«ććć¦smb.confćć”ć¤ć«ć®ę¤čؼćé©åć«č”ćććŖćććć«ēŗēćć¾ćć ć·ć¹ćć ę§ęę å ±ććµć¼ćę å ±ćå„Ŗå 1. Citrix 1989幓ć«čØē«ćććē±³å½ć®å¤å½ē±ć½ććć¦ć§ć¢ä¼ę„ ćµć¼ććć¢ććŖć±ć¼ć·ć§ć³ććć³ćć¹ćÆćććä»®ę³åćććććÆć¼ćć³ć°ćSaaSććÆć©ć¦ćć³ć³ćć„ć¼ćć£ć³ć°ęč”ćęä¾...
CVE-2026-88062
OmniRoute (open-source AI gateway) versions 3.8.49 and earlier are affected by a remote code execution flaw in the POST /api/acp/agents custom ACP agent endpoint. Attacker-controlled binary and versionCommand values pass a self-consistency check and a limited metacharacter filter (tokenizeVersion...
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of PDF components in Google Chrome and Microsoft Edge web browsers allows attackers to compromise data integrity.
The vulnerability of PDF components in Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to manipulate data integrity through a specially created HTML page...
The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
CVE-2026-18794 OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite
The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...
CVE-2026-78237 Insufficient input validation in Admin By Request (ABR)
Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended...
Security Bulletin: Vulnerability in Internationalized Domain Names in Applications (IDNA) for Python affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in Internationalized Domain Names in Applications IDNA for Python has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed...
CVE-2026-76314 Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could perform Remote Code Execution RCE by submitting crafted Splunk Web Manager Configuration content. The user could then access all relevant data and affect syst...
CVE-2026-75616 Command Injection in Router Web Management Interface
An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An authenticated administrator may exploit insufficient input validation to execute arbitrary system commands, potentially resulting...
CVE-2026-20232
The web-based management interface of Cisco IE 1000 Series Switches fails to validate user-supplied input, enabling an authenticated attacker to inject malicious script into specific pages that executes in another user's session (stored XSS). CVSS 5.4 (MEDIUM) requires valid credentials and user ...
PT-2026-78741
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A user without admin or power roles can achieve Remote Code...
PT-2026-78493
A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...
PT-2026-78522
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...
UBUNTU-CVE-2026-75006
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets CSS sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. This issue exists because of insufficient fixes for...
The vulnerability of the Jolokia component in Apache ActiveMQ allows a hacker to execute arbitrary code.
The vulnerability of the Jolokia component in Apache ActiveMQ is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the fs/minix/inode.c component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the fs/minix/inode.c component in the Linux operating system is related to insufficient checking of the type of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...