Lucene search
K

19582 matches found

RedhatCVE
RedhatCVE
added 2026/01/19 2:19 a.m.7 views

CVE-2026-1064

A vulnerability was found in bastillion-io Bastillion up to 4.0.1. This issue affects some unknown processing of the file src/main/java/io/bastillion/manage/control/SystemKtrl.java of the component System Management Module. Performing a manipulation results in command injection. The attack can be...

5.8CVSS6.6AI score0.04156EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/19 2:19 a.m.5 views

CVE-2026-1063

A vulnerability has been found in bastillion-io Bastillion up to 4.0.1. This vulnerability affects unknown code of the file src/main/java/io/bastillion/manage/control/AuthKeysKtrl.java of the component Public Key Management System. Such manipulation leads to command injection. It is possible to...

5.8CVSS6.8AI score0.04156EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/19 12:0 a.m.7 views

PT-2026-3513

A vulnerability was determined in Tosei Online Store Management System ネット店舗管理システム 1.01. The affected element is an unknown function of the file /cgi-bin/imode alldata.php. Executing a manipulation of the argument DevId can lead to command injection. The attack can be executed remotely. The explo...

7.5CVSS5.4AI score0.06123EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2026/01/19 12:0 a.m.4 views

MiracleLinux 3 : dhcp-3.0.5-23.4.0.1.AXS3 (AXSA:2011-162:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-162:01 advisory. DHCP Dynamic Host Configuration Protocol is a protocol which allows individual devices on an IP network to get their own network configuration information IP...

7.5CVSS7AI score0.84172EPSS
Exploits6References2
ATTACKERKB
ATTACKERKB
added 2026/01/18 4:2 p.m.3 views

CVE-2026-1125

A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...

9.8CVSS5.4AI score0.1438EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/18 4:2 p.m.41 views

CVE-2026-1125 D-Link DIR-823X set_wifidog_settings sub_412E7C command injection

A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...

7.5CVSS0.1438EPSS
Exploits1References6
OSV
OSV
added 2026/01/17 9:15 p.m.3 views

CVE-2026-1066

A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may b...

8.8CVSS6.3AI score
Exploits0References4
NVD
NVD
added 2026/01/17 9:15 p.m.8 views

CVE-2026-1066

A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may b...

8.8CVSS0.0504EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/01/17 9:2 p.m.4 views

CVE-2026-1066 kalcaddle kodbox Compression zip command injection

A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may b...

6.5CVSS5.3AI score0.0504EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/17 9:2 p.m.5 views

EUVD-2026-3128

A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may b...

6.5CVSS6.4AI score0.0504EPSS
Exploits0References5
CVE
CVE
added 2026/01/17 9:2 p.m.17 views

CVE-2026-1066

The CVE-2026-1066 entry describes a command-injection vulnerability in kalcaddle kodbox (up to version 1.61.10) related to the Compression Handler when processing the file /?explorer/index/zip. The issue can be exploited remotely; the exploit is public. Details on vulnerable component, root cause...

8.8CVSS6.5AI score0.0504EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/17 8:32 p.m.5 views

CVE-2026-1064 bastillion-io Bastillion System Management SystemKtrl.java command injection

A vulnerability was found in bastillion-io Bastillion up to 4.0.1. This issue affects some unknown processing of the file src/main/java/io/bastillion/manage/control/SystemKtrl.java of the component System Management Module. Performing a manipulation results in command injection. The attack can be...

5.8CVSS5.3AI score0.04156EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/17 8:32 p.m.7 views

EUVD-2026-3129

A vulnerability was found in bastillion-io Bastillion up to 4.0.1. This issue affects some unknown processing of the file src/main/java/io/bastillion/manage/control/SystemKtrl.java of the component System Management Module. Performing a manipulation results in command injection. The attack can be...

5.8CVSS6.3AI score0.04156EPSS
Exploits0References5
NVD
NVD
added 2026/01/17 8:15 p.m.4 views

CVE-2026-1063

A vulnerability has been found in bastillion-io Bastillion up to 4.0.1. This vulnerability affects unknown code of the file src/main/java/io/bastillion/manage/control/AuthKeysKtrl.java of the component Public Key Management System. Such manipulation leads to command injection. It is possible to...

5.8CVSS0.04156EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/17 8:2 p.m.5 views

CVE-2026-1063

A vulnerability has been found in bastillion-io Bastillion up to 4.0.1. This vulnerability affects unknown code of the file src/main/java/io/bastillion/manage/control/AuthKeysKtrl.java of the component Public Key Management System. Such manipulation leads to command injection. It is possible to...

5.8CVSS5.1AI score0.04156EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2026/01/17 8:2 p.m.22 views

CVE-2026-1063 bastillion-io Bastillion Public Key Management System AuthKeysKtrl.java command injection

A vulnerability has been found in bastillion-io Bastillion up to 4.0.1. This vulnerability affects unknown code of the file src/main/java/io/bastillion/manage/control/AuthKeysKtrl.java of the component Public Key Management System. Such manipulation leads to command injection. It is possible to...

5.8CVSS0.04156EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/17 8:2 p.m.4 views

EUVD-2026-3127

A vulnerability has been found in bastillion-io Bastillion up to 4.0.1. This vulnerability affects unknown code of the file src/main/java/io/bastillion/manage/control/AuthKeysKtrl.java of the component Public Key Management System. Such manipulation leads to command injection. It is possible to...

5.8CVSS6.5AI score0.04156EPSS
Exploits0References5
CVE
CVE
added 2026/01/17 8:2 p.m.11 views

CVE-2026-1063

The vulnerability CVE-2026-1063 affects Bastillion (Bastillion up to 4.0.1) in the Public Key Management System. The issue involves manipulation in src/main/java/io/bastillion/manage/control/AuthKeysKtrl.java that enables command injection. Attack is described as executable remotely and publicly ...

5.8CVSS6.7AI score0.04156EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/17 9:15 a.m.8 views

CVE-2025-60021

Remote command injection vulnerability in heap profiler builtin service in Apache bRPC all versions 1.15.0 on all platforms allows attacker to inject remote command. Root Cause: The bRPC heap profiler built-in service /pprof/heap does not validate the user-provided extraoptions parameter and...

9.8CVSS8.1AI score0.26163EPSS
Exploits3References1
Positive Technologies
Positive Technologies
added 2026/01/17 12:0 a.m.4 views

PT-2026-3370

A vulnerability has been found in bastillion-io Bastillion up to 4.0.1. This vulnerability affects unknown code of the file src/main/java/io/bastillion/manage/control/AuthKeysKtrl.java of the component Public Key Management System. Such manipulation leads to command injection. It is possible to...

5.8CVSS7AI score0.04156EPSS
Exploits0References5
Rows per page
Query Builder