Lucene search
+L

270238 matches found

Nuclei
Nuclei
added 2026/09/05 2:04 a.m.41 views

vBulletin 5.0.0-6.0.3 - Authentication Bypass

vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 contain an authentication bypass caused by unauthenticated access to protected API controllers on PHP 8.1 or later, letting unauthenticated attackers invoke protected methods remotely.Starting from PHP 8.1, due to an internal adjustment to...

10CVSS9AI score0.75844EPSS
SaveExploits4References2
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.93 views

osCommerce 2.3.4.1 - Remote Code Execution

osCommerce Online Merchant 2.3.4.1 contains a remote code execution caused by insecure default configuration and missing authentication in the installer workflow, letting unauthenticated attackers execute arbitrary PHP code via install4.php, exploit requires accessible /install/ directory after...

9.3CVSS6.5AI score0.0282EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.87 views

sar2html <=3.2.2 Plot Parameter - Remote Code Execution

sar2html version 3.2.2 and prior contains an OS command injection vulnerability in the plot parameter of index.php. A remote, unauthenticated attacker can append shell metacharacters to the plot parameter and execute arbitrary operating system commands. id: CVE-2025-34030 info: name: sar2html...

10CVSS9AI score0.60298EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.66 views

Samsung MagicINFO 9 Server - File Upload & Remote Code Execution

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority. id: CVE-2025-4632 info: name: Samsung MagicINFO 9 Server - File Upload & Remote Code Execution author: s4e-i...

9.8CVSS9.3AI score0.24295EPSS
SaveExploits4References4
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.25 views

Tandoor Recipes < 1.5.24 - Jinja2 SSTI RCE

Tandoor Recipes 1.5.24 has a Jinja2 SSTI vulnerability that allows command execution via recipe steps. id: CVE-2025-23211 info: name: Tandoor Recipes 1.5.24 - Jinja2 SSTI RCE author: sammiee5311 severity: critical description: | Tandoor Recipes 1.5.24 has a Jinja2 SSTI vulnerability that allows...

9.9CVSS5.3AI score0.03593EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.31 views

Nginx UI - Broken Access Control

Network attackers can fully control nginx service, including config modification and service restart, leading to complete service takeover. id: CVE-2026-33032 info: name: Nginx UI - Broken Access Control author: DhiyaneshDk severity: critical description: | Network attackers can fully control ngi...

9.8CVSS9AI score0.36299EPSS
SaveExploits5References3
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.30 views

vBulletin 6.x - Remote Code Execution

vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contain an eval injection vulnerability caused by insufficiently restrictive regex filtering in vB5TemplateRuntime::runMaths, letting unauthenticated remote attackers execute arbitrary PHP code via the pagenavpagenumber parameter in ajax/render...

9.8CVSS6.3AI score0.70766EPSS
SaveExploits8References2
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.40 views

Kestra <= 1.3.20 - Remote Code Execution

Kestra = 1.3.20 contains an authentication bypass caused by misclassification of /configs endpoint in REST API filter, letting unauthenticated attackers create and execute root-level tasks, exploit requires unauthenticated access to /configs endpoint. id: CVE-2026-53576 info: name: Kestra = 1.3.2...

10CVSS5.4AI score0.03189EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.4 views

DB-GPT <= 0.8.1 - Arbitrary File Write

DB-GPT through 0.8.1 allows unauthenticated arbitrary file writes via a path traversal in the userid HTTP header of the POST /api/v1/python/file/upload endpoint, letting attackers escape the intended upload directory and write files anywhere, as confirmed by the reflected upload path in the JSON...

9.8CVSS5.5AI score0.05122EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.22 views

Windmill < 1.603.3 - SQL Injection

Windmill versions 1.276.0 through 1.603.2 contain an authenticated SQL injection vulnerability in the folder owner management endpoint. The addowner API endpoint passes user-supplied input directly into a SQL query without sanitization, enabling JSONB path injection. An authenticated user with...

9.9CVSS8.3AI score0.13582EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.28 views

Xerte Online Toolkits <= 3.15 - Remote Code Execution

Xerte Online Toolkits versions 3.15 and earlier expose the elFinder file manager connector at /editor/elfinder/php/connector.php without authentication CVE-2026-34413, because the access-control redirect for unauthenticated users does not call exit/die and execution continues server-side. This is...

9.8CVSS6.1AI score0.03575EPSS
SaveExploits2References6
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.269 views

Symfony - Authentication Bypass

Symfony 2.3.19 through 2.3.28, 2.4.9 through 2.4.10, 2.5.4 through 2.5.11, and 2.6.0 through 2.6.7, when ESI or SSI support enabled, does not check if the controller attribute is set, which allows remote attackers to bypass URL signing and security rules by including 1 no hash or 2 an invalid has...

4.3CVSS5.4AI score0.08269EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.8 views

Podlove Podcast Publisher <= 4.5.1 - Arbitrary File Upload

Podlove Podcast Publisher plugin for WordPress through 4.5.1 is vulnerable to arbitrary file uploads due to missing file type validation in the podlovehandlecachefiles function. The image cache derives the stored file extension from the path of the attacker supplied source URL, while the image...

9.8CVSS5.5AI score0.03757EPSS
SaveExploits6References5
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.31 views

WordPress Kali Forms <= 2.4.9 - Remote Code Execution

Kali Forms WordPress plugin = 2.4.9 contains a remote code execution caused by unsafe user input handling in 'formprocess' and 'preparepostdata' functions, letting unauthenticated attackers execute code on the server, exploit requires no authentication. id: CVE-2026-3584 info: name: WordPress Kal...

9.8CVSS6.4AI score0.07239EPSS
SaveExploits2References2
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.38 views

MindsDB - Remote Code Execution

MindsDB 25.9.1.1 contains a remote code execution caused by path traversal in the /api/files upload file module, letting authenticated attackers write arbitrary files and execute commands, exploit requires authentication. id: CVE-2026-27483 info: name: MindsDB - Remote Code Execution author:...

8.8CVSS6.5AI score0.11113EPSS
SaveExploits5References4
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.292 views

MobSF - Path Traversal

MobSF is vulnerable to an issue with apktool CVE-2024-21633 that allows for RCE or arbitrary file writing. It does this through a path traversal vulnerability. This template tests for it by writing to a local file and reading that file. RCE can be achieved by overwriting jadx, as shown in the two...

7.8CVSS7.6AI score0.0132EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.198 views

ISPConfig - PHP Code Injection

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. id: CVE-2023-46818 info: name: ISPConfig - PHP Code Injection author: non-things severity: high description: | An issue was discovered...

7.2CVSS7.2AI score0.13784EPSS
SaveExploits14References4
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.33 views

UniFi Access - Broken Access Control

UniFi Access Application 3.3.22 through 3.4.31 contains a broken authentication caused by misconfiguration exposing management API without proper authentication, letting attackers on management network access management functions, exploit requires network access. id: CVE-2025-52665 info: name:...

10CVSS9AI score0.40972EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.83 views

Avaya Aura Device Services - OS Command Injection

An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier. id: CVE-2023-3722 info: name:...

9.8CVSS9.3AI score0.0386EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/05 2:04 a.m.104 views

mojoPortal v.2.7.0.0 - Cross-Site Scripting

Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the helpkey parameter in the Help.aspx component. id: CVE-2023-44012 info: name: mojoPortal v.2.7.0.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross...

6.1CVSS6.7AI score0.01258EPSS
SaveExploits1References3
Rows per page
Query Builder