Lucene search
+L

270363 matches found

NVD
NVD
added 2026/09/03 11:17 p.m.8 views

CVE-2026-85437

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

9.8CVSS0.00682EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/03 11:17 p.m.9 views

CVE-2026-85439

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary...

8.5CVSS0.00251EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/03 11:17 p.m.8 views

CVE-2026-85427

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSIONFILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntl...

9.2CVSS0.00421EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/03 11:17 p.m.9 views

CVE-2026-85425

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAYMOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAYMOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay process...

9.8CVSS0.00957EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/03 11:17 p.m.8 views

CVE-2026-18167

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...

7.7CVSS0.0027EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/03 11:00 p.m.8 views

gitpython: GitPython: Remote Code Execution via malicious Git template

A flaw was found in GitPython. An incomplete denylist in the unsafegitcloneoptions function fails to restrict the --template option. This allows a remote attacker to supply a malicious Git template directory, leading to arbitrary command execution during clone operations...

8.8CVSS7.7AI score0.00961EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2026/09/03 11:00 p.m.9 views

gitpython: GitPython: Remote Code Execution via kwarg value smuggling

A flaw was found in GitPython. Attackers can bypass the checkunsafeoptions guard by smuggling git options within single-character keyword argument kwarg values. This allows them to supply specially crafted option dictionaries to various GitPython methods, such as clonefrom or fetch, leading to...

8.8CVSS8.2AI score0.00653EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2026/09/03 11:00 p.m.9 views

gitpython: GitPython: Remote Code Execution via malicious Git hooks

A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the Repo.init function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on...

8.8CVSS6.3AI score0.0072EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2026/09/03 10:38 p.m.34 views

CVE-2026-85439 MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary...

8.5CVSS0.00251EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/03 10:38 p.m.10 views

CVE-2026-85439

MOOS-IvP through 24.8.1 contains a command injection vulnerability in alogsplit 's SplitHandler::handlePreCheckSplitDir() function, which fails to sanitize shell metacharacters in log file pathnames. An attacker can embed shell syntax in log file names or the --dir parameter to execute arbitrary ...

8.5CVSS6.5AI score0.00251EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/03 10:38 p.m.4 views

CVE-2026-85439 MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname

MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheckSplitDir function that fails to sanitize shell metacharacters in log file pathnames. Attackers can embed shell syntax in log file names or the --dir parameter to execute arbitrary...

8.5CVSS6.9AI score
SaveExploits0References7
CVE
CVE
added 2026/09/03 10:38 p.m.18 views

CVE-2026-85437

MOOS-IvP through version 24.8.1 is affected by multiple buffer overflow vulnerabilities in its IvP function string decoders (specifically in FunctionEncoder.cpp). The root cause is that decoders trust attacker-controlled length fields without validation, allowing an attacker to craft malicious en...

9.8CVSS6.6AI score0.00682EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/03 10:38 p.m.4 views

CVE-2026-85437 MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

9.3CVSS6.8AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/03 10:38 p.m.34 views

CVE-2026-85437 MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

9.8CVSS0.00682EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/03 10:38 p.m.30 views

CVE-2026-85427 MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILE

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSIONFILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntl...

9.2CVSS0.00421EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/03 10:38 p.m.16 views

CVE-2026-85427

pAntler in MOOS essential-moos through 10.0.1 is vulnerable to remote code execution. An unauthenticated attacker can publish a crafted MISSION_FILE message to the MOOSDB containing malicious Run entries, which pAntler parses and executes via execvp() without any authentication validation. The vu...

9.2CVSS6.5AI score0.00421EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/03 10:38 p.m.5 views

CVE-2026-85427 MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILE

MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSIONFILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntl...

9.2CVSS6.9AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/03 10:38 p.m.32 views

CVE-2026-85425 MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAYMOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAYMOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay process...

9.8CVSS0.00957EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/03 10:38 p.m.4 views

CVE-2026-85425 MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAYMOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAYMOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay process...

9.3CVSS6.9AI score
SaveExploits0References7
CVE
CVE
added 2026/09/03 10:38 p.m.13 views

CVE-2026-85425

MOOS-IvP versions through 24.8.1 contain a remote code execution vulnerability in the SAY_MOOS variable handler of the iSay component. The handler passes unsanitized text to a shell command, allowing attackers to publish SAY_MOOS messages containing backticks or command substitution syntax to exe...

9.8CVSS6.5AI score0.00957EPSS
SaveExploits0References5
Rows per page
Query Builder