272919 matches found
CVE-2026-85427
pAntler in MOOS essential-moos through 10.0.1 is vulnerable to remote code execution. An unauthenticated attacker can publish a crafted MISSION_FILE message to the MOOSDB containing malicious Run entries, which pAntler parses and executes via execvp() without any authentication validation. The vu...
CVE-2026-85427 MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILE
MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSIONFILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntl...
CVE-2026-85427 MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILE
MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSIONFILE message to the MOOSDB. Attackers can publish a mission file containing malicious Run entries that pAntl...
CVE-2026-85425 MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS
MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAYMOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAYMOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay process...
CVE-2026-85425 MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS
MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAYMOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAYMOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay process...
CVE-2026-85425
MOOS-IvP versions through 24.8.1 contain a remote code execution vulnerability in the SAY_MOOS variable handler of the iSay component. The handler passes unsanitized text to a shell command, allowing attackers to publish SAY_MOOS messages containing backticks or command substitution syntax to exe...
CVE-2026-18167 Stack-based buffer overflow in TP-Link Archer AX55 v4
A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...
CVE-2026-18167
A stack-based buffer overflow in the EasyMesh module of the TP-Link Archer AX55 v4 allows a LAN attacker, when Mesh mode is enabled, to submit crafted input that crashes the easymesh daemon and may potentially achieve remote code execution . The vulnerability requires no prior authentication but ...
RCE (Remote Code Execution) at jackson-databind Dependency in Bamboo Data Center
This High severity RCE Remote Code Execution vulnerability known as CVE-2026-54513 was introduced in 10.1.0 and later of Bamboo Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H allows an...
CVE-2017-1000486
README - CVE-2020-1039909 Primefaces Remote Code Execution ============================================================ SOBRE A VULNERABILIDADE CVE-2020-1039909 e uma vulnerabilidade de execucao remota de codigo RCE no framework Primefaces JSF. A falha permite que um atacante execute comandos...
CVE-2026-13001
CVE-2026-13001 — Podlove Podcast Publisher Unauthenticated File Upload RCE isimage vs extractfileextension Mismatch → PHP Polyglot Upload Overview CVE-2026-13001 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Podlove Podcast Publisher WordPress plugin...
CVE-2026-85050
Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-85046
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-85046
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-85046
A flaw was found in V8, the JavaScript engine in Google Chrome. This type confusion vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a compromise of the user's system...
EUVD-2026-70214
TOON: Prototype pollution when decoding untrusted TOON input...
NPM: Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)
NPM: Claude Code Templates: Unauthenticated OS command injection RCE in Claude Code Studio server --studio vulnerability discovered by ? in WordPress Npm claude-code-templates versions = 1.29.2...
EUVD-2026-70709
Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-85046
A type confusion in the V8 JavaScript engine in Google Chrome prior to 152.0.7977.82 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Rated High by Chromium. The vulnerability has been added to the CISA KEV catalog (added 2026-09-04), with SSVC rating...