18551 matches found
CVE-2026-91098
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
CVE-2026-91097 HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...
CVE-2026-92718
Nuclei versions before 3.11.1 cache template signature verification based only on file modification time without content checksums. Attackers can replace verified templates with unsigned malicious content and restore the original modification time to bypass signature checks and execute arbitrary...
Exploit for CVE-2026-89026
CVE-2026-89026 Issabel pbxapi hard coded JWT RCE POC Issabel...
CVE-2026-92718
Nuclei (ProjectDiscovery) versions from 3.7.0 before 3.11.1 contain a template signature bypass due to a cache that relies solely on file modification time rather than content checksums. An attacker with local access and low privileges can replace a signed template with unsigned malicious content...
Malicious code in praetorian-mind-rce-test-2026 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a16a607fd396ce7218fb45728cb3ca55f541326c83a063668a7a170b46acc1 At pip install time, setup.py calls a phonehome routine at module top-level before setup runs. The routine collects extensive host and container...
MAL-2026-16240 Malicious code in praetorian-mind-rce-test-2026 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a16a607fd396ce7218fb45728cb3ca55f541326c83a063668a7a170b46acc1 At pip install time, setup.py calls a phonehome routine at module top-level before setup runs. The routine collects extensive host and container...
WordPress WP Import Export Lite plugin < 3.9.33 - Authenticated RCE vulnerability
Authenticated RCE vulnerability discovered by Erwan LR WPScan in WordPress Plugin WP Import Export Lite versions 3.9.33...
WordPress WP Import Export Lite plugin < 3.9.34 - Authenticated RCE vulnerability
Authenticated RCE vulnerability discovered by mak3breadMinseong Kim in WordPress Plugin WP Import Export Lite versions 3.9.34...
CVE-2026-86358
Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2026-20307
CVE-2026-20307 affects the web-based management interface of Cisco ISE and stems from insecure deserialization of a user-supplied Java byte stream . An authenticated remote attacker with at least low-privileged administrative credentials can send a crafted serialized Java object to achieve arbitr...
CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerability
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative...
CVE-2026-85756 SSH.NET: ScpClient allows server-side RCE via default SCP path handling
SSH.NET is a Secure Shell SSH library for .NET. Prior to 2026.0.0, ScpClient places caller-supplied remote paths into the command used to run scp on the server, and the default RemotePathTransformation.DoubleQuote transformation cannot safely quote every remote command interpreter. When an...
CVE-2026-85756 SSH.NET: ScpClient allows server-side RCE via default SCP path handling
SSH.NET is a Secure Shell SSH library for .NET. Prior to 2026.0.0, ScpClient places caller-supplied remote paths into the command used to run scp on the server, and the default RemotePathTransformation.DoubleQuote transformation cannot safely quote every remote command interpreter. When an...
CVE-2026-85756
SSH.NET is a Secure Shell (SSH) library for .NET. Prior to 2026.0.0 , the ScpClient component places caller-supplied remote paths into the command used to run scp on the server. The default RemotePathTransformation.DoubleQuote transformation cannot safely quote every remote command interpreter, s...
CVE-2026-85756 SSH.NET: ScpClient allows server-side RCE via default SCP path handling
SSH.NET is a Secure Shell SSH library for .NET. Prior to 2026.0.0, ScpClient places caller-supplied remote paths into the command used to run scp on the server, and the default RemotePathTransformation.DoubleQuote transformation cannot safely quote every remote command interpreter. When an...
CVE-2026-86358
Dell Update Package Framework (DUP) versions prior to 26.07.03 contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access can exploit it to achieve remote code execution . NVD rates it CVSS 3.1 8.8 (HIGH) ; Dell's CNA assigns 6.5 (MEDIUM) , diffe...
CVE-2026-92627
A heap-use-after-free vulnerability exists in H5Tconvff in src/H5Tconv.c in HDF5 before 1.14.2. When converting a compound datatype containing floating-point members during a dataset read, a temporary buffer allocated with calloc is freed and subsequently read from within the same conversion...
CVE-2025-59953
LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.1 and prior to version 0.10.2, the LMdeploy implements an rpc server AsyncRPCServer in zmqrpc.py for supporting the RPC communications. In its core functionality callandresponse, I found i...