273125 matches found
EUVD-2026-62731
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...
CVE-2026-16841
IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack buffer overflow exploitable by a remote, unauthenticated attacker on an adjacent network, yielding arbitrary code execution with HIGH confidentiality, integrity, and availability impact (CVSS 8.8). IBM reference: https://www.ibm.com/support/pag...
CVE-2026-16840 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write...
Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)
Impact A remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where it is executed as the document-merge-server user with the UID 901 thus giving an attacker considerable control over the container. The vulnerabilit...
EUVD-2026-62698
ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an authentication bypass, CSRF validation bypass, and unsanitized command execution. Attackers can send a single HTTP POST request to the...
CVE-2026-63722 ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php
ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an authentication bypass, CSRF validation bypass, and unsanitized command execution. Attackers can send a single HTTP POST request to the...
CVE-2026-63722 ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php
ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an authentication bypass, CSRF validation bypass, and unsanitized command execution. Attackers can send a single HTTP POST request to the...
CVE-2026-44402
CVE-2026-44402 Неаутентифицированное полное удалённое выполнение команд в Voltronic Power SNMP Web Pro 1.1 Содержание Затронутый производитель: https://voltronicpower.com/ Затронутый продукт: SNMP Web pro 1.1 SNMP Web Pro 1.1 содержит неаутентифицированную уязвимость удалённого выполнения кода в...
CVE-2026-17494
CVE-2026-17494 is a stack-based buffer overflow (CWE-121) in the interface between the BMC and host system of IBM Power Systems Firmware. Affected versions are FW1120.00 and FW1110.00 through FW1110.30 . An attacker with service access to the BMC can send a specially crafted command to achieve ar...
CVE-2026-17494 Power System Buffer Overflow
IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system,...
EUVD-2026-62629
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access ...
CVE-2026-62442
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:45+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71045
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:22+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-60757
creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:00+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-60791
creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71116
creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:43+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-60766
creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:34+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-23479
CVE-2026-23479 — مجموعة Redis Use-After-Free RCE PoC صورة توزيع HackSpeak. يجمع هذا المستودع ثلاث أدوات PoC/كشف عامة , والكود مطابق لكل مستودع أصلي upstream. ⚠️ يحتوي على كود استغلال فعلي وأدوات كشف ; مخصص لأغراض البحث الأمني والتحقق من الثغرات والاختبار المصرح به فقط. يُرجى التشغيل في بيئة قابلة...
CVE-2026-72530
creationtimestamp| type| source ---|---|--- 2026-08-19 18:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthcttatjf27 2026-08-19 18:11:24+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthdegbfxg2m 2026-08-19 23:00:05+00:00| seen|...
