271734 matches found
CVE-2026-78745
An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352EDMO allows a remote attacker to execute arbitrary code via the Android Debug Bridge ADB daemon adbd...
MiracleLinux 8 : gimp:2.8 (AXSA:2026-1773:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1773:01 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: integer overflow in file-fits plugin causes a heap-based buffer overflo...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-good (UTSA-2026-106456)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106456 advisory. GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...
The vulnerability of the debugging console for the WatchMan-Site7 plugin of the WordPress content management system allows a hacker to execute arbitrary code.
The vulnerability of the debugging console for the WatchMan-Site7 plugin of the WordPress content management system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Flextype CMS 1.0.0-alpha.3 Remote Code Execution
Flextype CMS version 1.0.0-alpha.3 contains a remote code execution vulnerability in the interaction between the Entries API and Shortcodes::registerShortcodes. The /api/v1/entries endpoint accepts an attacker-controlled entry identifier that can contain path traversal sequences, allowing content...
CVE-2026-71620
CVE-2026-71620 is a file upload vulnerability in Zhao-github ApiAdmin v5.0.1 that allows a remote attacker with low privileges to execute arbitrary code by uploading a crafted .php file. The CVSS 3.1 score is 8.1 (HIGH) , reflecting network reachability, low attack complexity, and high impact on ...
EUVD-2026-71610
Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...
CVE-2026-71620
File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file...
CVE-2026-71624
esoTalk v1.0.0g4 is vulnerable to remote code execution via a Configuration Comment Injection flaw, as indicated by the advisory reference. The attack targets the ETMemberModel.class.php, ETMemberController.class.php, and ET.class.php components, requiring no authentication or user interaction . ...
CVE-2026-71624
An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controllers/ETMemberController.class.php, and core/lib/ET.class.php components...
CVE-2026-79423
An authenticated remote code execution vulnerability in the admin_config.php component of seacms v13.6 allows an attacker with low privileges to execute arbitrary code via a crafted POST request. The CVSS 3.1 score is 8.8 (HIGH) with high impact on confidentiality, integrity, and availability. CI...
CVE-2026-31020
CVE-2026-31020 affects DocsGPT 0.15.0 and below , where the application's custom prompt feature renders user-supplied prompt data using Jinja templates without input sanitization or sandboxing. This enables an unauthenticated attacker to inject malicious template expressions, resulting in a serve...
Google Chromium V8 Type Confusion Vulnerability
Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge,...
CVE-2026-75430
PowerJob Worker version 5.1.2 (and likely earlier) exposes the /worker/deployContainer HTTP endpoint without authentication on its default transport port, allowing a remote unauthenticated attacker to execute arbitrary code . The vulnerability is scored CVSS 9.8 (Critical) — network attack vector...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-good (UTSA-2026-106462)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106462 advisory. GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-good (UTSA-2026-106455)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106455 advisory. GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...
CVE-2026-78745
CVE-2026-78745 affects HiDPT / Weyon HiDPTAndroid devices running the Hi3751V350 and Hi3751V352E_DMO platforms. The Android Debug Bridge daemon (adbd) is exposed to remote access without expected privilege restrictions, and ADB sessions execute with root-level permissions , enabling arbitrary cod...
CVE-2026-75431
PowerJob Server version 5.1.2 and likely earlier uses a predictable JWT signing key for HS256-based authentication. This allows a remote attacker to execute arbitrary code...
PT-2026-86247
CVE-2026-50894: Unrestricted file upload in easyadmin v2.0.2.2 enables authenticated RCE and full server takeover. CVSS not scored, but impact is critical. If you use easyadmin, restrict access and audit uploads now. Patch https://t.co/GZLmhBXY4r cybersecurit valtersit CVE CVEAlert infosec SysAdm...