CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3516 matches found

Positive Technologies•added 2025/12/11 12:00 a.m.•18 views

PT-2025-50767

Name of the Vulnerable Software and Affected Versions WBCE CMS versions prior to 1.6.3 WBCE CMS version 1.6.3 Description WBCE CMS versions 1.6.3 and earlier have a flaw that permits administrators to execute code remotely by uploading malicious modules. An attacker can create a ZIP module...

8.6CVSS7.1AI score0.00909EPSS

SaveExploits1References8

Rapid7 Vulnerability Database (full)•added 2025/12/11 12:00 a.m.•8 views

CVE-2025-34506: Unrestricted Upload of File with Dangerous Type

WBCE CMS version 1.6.3 and prior contains an authenticated remote code execution vulnerability that allows administrators to upload malicious modules. Attackers can craft a specially designed ZIP module with embedded PHP reverse shell code to gain remote system access when the module is installed...

8.8CVSS6.3AI score0.00909EPSS

SaveExploits1References5

GithubExploit•added 2025/12/10 7:21 p.m.•176 views

Exploit for Deserialization of Untrusted Data in Facebook React

🛡️ React2Shell CTF 🚀 !Securityhttps://img.shields.io/badge...

10CVSS7.8AI score0.99802EPSS

SaveExploits397

RedhatCVE•added 2025/12/10 11:33 a.m.•25 views

CVE-2024-56836

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.0, RUGGEDCOM ROX MX5000RE All versions V2.17.0, RUGGEDCOM ROX RX1400 All versions V2.17.0, RUGGEDCOM ROX RX1500 All versions V2.17.0, RUGGEDCOM ROX RX1501 All versions V2.17.0, RUGGEDCOM ROX RX1510 All versions V2.17.0...

8.8CVSS9AI score0.00433EPSS

SaveExploits0References1

RedhatCVE•added 2025/12/10 11:33 a.m.•18 views

CVE-2024-56835

8.8CVSS9.1AI score0.00507EPSS

SaveExploits0References1

RedhatCVE•added 2025/12/10 11:33 a.m.•31 views

CVE-2024-56837

8.6CVSS9AI score0.00517EPSS

SaveExploits0References1

EUVD•added 2025/12/09 6:30 p.m.•18 views

EUVD-2024-55309

A vulnerability has been identified in RUGGEDCOM ROX II family All versions V2.17.0. The DHCP Server configuration file of the affected products is subject to code injection. An attacker could leverage this vulnerability to spawn a reverse shell and gain root access on the affected system...

8.8CVSS6.8AI score0.00507EPSS

SaveExploits0References2

EUVD•added 2025/12/09 6:30 p.m.•19 views

EUVD-2024-55307

A vulnerability has been identified in RUGGEDCOM ROX II family All versions V2.17.0. Due to the insufficient validation during the installation and load of certain configuration files of the affected device, an attacker could spawn a reverse shell and gain root access on the affected system...

8.6CVSS6.5AI score0.00517EPSS

SaveExploits0References2

EUVD•added 2025/12/09 6:30 p.m.•18 views

EUVD-2024-55308

A vulnerability has been identified in RUGGEDCOM ROX II family All versions V2.17.0. During the Dynamic DNS configuration of the affected product it is possible to inject additional configuration parameters. Under certain circumstances, an attacker could leverage this vulnerability to spawn a...

7.7CVSS6.5AI score0.00433EPSS

SaveExploits0References2

OSV•added 2025/12/09 4:17 p.m.•14 views

CVE-2024-56836

8.8CVSS5.8AI score0.00433EPSS

SaveExploits0References1

OSV•added 2025/12/09 4:17 p.m.•18 views

CVE-2024-56837

8.6CVSS5.7AI score0.00517EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•20 views

CVE-2024-56835

8.8CVSS0.00507EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•18 views

CVE-2024-56837

8.6CVSS0.00517EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•18 views

CVE-2024-56836

8.8CVSS0.00433EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•37 views

CVE-2024-56837

Siemens RUGGEDCOM ROX II family devices (ROX II) prior to v2.17.0 are affected by a code-injection vulnerability caused by insufficient validation during installation and loading of certain configuration files. Several sources document that an attacker could exploit this to spawn a reverse shell ...

8.6CVSS7AI score0.00517EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2025/12/09 10:44 a.m.•41 views

CVE-2024-56837

8.6CVSS0.00517EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•8 views

CVE-2024-56837

8.6CVSS7AI score0.00517EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•6 views

CVE-2024-56836

7.7CVSS7.1AI score0.00433EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•42 views

CVE-2024-56836

7.7CVSS0.00433EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•35 views

CVE-2024-56836

The CVE-2024-56836 issue affects Siemens RUGGEDCOM ROX II devices (MX5000/MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with versions before 2.17.0. According to connected documents, the vulnerability arises during Dynamic DNS configuration where additional con...

8.8CVSS7.1AI score0.00433EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by