Lucene search
+L

1077 matches found

Kitploit
Kitploit
•added 2026/11/05 2:36 p.m.•25 views

tweets_analyzer

Simple Twitter Profile Analyzer The goal of this simple python script is to analyze a Twitter profile through its tweets by detecting: Average tweet activity, by hour and by day of the week Timezone and language set for the Twitter interface Sources used mobile application, web browser,...

6.2AI score
SaveExploits0
NVD
NVD
•added 2026/11/04 2:17 a.m.•6 views

CVE-2026-121608

A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. This vulnerability affects the function onpushmessage of the file /fs2/bin/iscm of the component Timezone Push Handler. Executing a manipulation of the argument tz can lead to os command injection. The attack may b...

7.5CVSS0.01308EPSS
SaveExploits0References5
CVE
CVE
•added 2026/11/04 1:30 a.m.•15 views

CVE-2026-121608

Qihoo 360 devices, specifically models D603-2 , D600-2 , and D606-6 running firmware versions up to 6.3.2 , are susceptible to an OS command injection vulnerability. The flaw exists within the Timezone Push Handler component, specifically in the on_push_message function of the /fs2/bin/iscm file....

7.5CVSS7AI score0.01308EPSS
SaveExploits0References5
NVD
NVD
•added 2026/11/03 3:17 p.m.•9 views

CVE-2026-121428

AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...

8.8CVSS0.00736EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/03 2:28 p.m.•16 views

CVE-2026-121428

AzuraCast versions through 0.23.8 are vulnerable to Remote Code Execution (RCE) due to a Supervisor configuration injection flaw in the station timezone field. Authenticated station managers can exploit the profile edit API by submitting a timezone string containing newlines. This allows the inje...

8.8CVSS6.3AI score0.00736EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/11/03 2:28 p.m.•7 views

CVE-2026-121428 AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone

AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...

8.7CVSS6.4AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/11/03 2:28 p.m.•22 views

CVE-2026-121428 AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone

AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...

8.8CVSS0.00736EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/11/03 2:28 p.m.•8 views

EUVD-2026-115960

AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...

8.8CVSS6.3AI score0.00736EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/11/03 2:28 p.m.•7 views

CVE-2026-121428 AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone

AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...

8.8CVSS6.3AI score0.00736EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/03 12:00 a.m.•7 views

CVE-2026-121428: AzuraCast: AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to…

AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...

8.8CVSS6.3AI score0.00736EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/03 12:00 a.m.•4 views

PT-2026-136185

Name of the Vulnerable Software and Affected Versions AzuraCast versions prior to 0.23.9 Description Authenticated station managers can achieve remote code execution by injecting Supervisor configuration via the station timezone field. By submitting a timezone containing newlines to the profile...

8.8CVSS6.3AI score0.00736EPSS
SaveExploits0References6
NVD
NVD
•added 2026/11/02 1:17 p.m.•7 views

CVE-2026-111560

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...

8.6CVSS0.00471EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/02 12:59 p.m.•26 views

CVE-2026-111560 OS Command Injection in Barracuda Appliances

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...

8.6CVSS0.00471EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/02 12:59 p.m.•39 views

CVE-2026-111560

Certain Barracuda appliance products are vulnerable to OS command injection due to the improper neutralization of shell metacharacters in the timezone configuration field . An authenticated administrator can inject and execute arbitrary OS commands with root privileges when a crafted timezone val...

8.6CVSS6.5AI score0.00471EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/11/02 12:59 p.m.•10 views

EUVD-2026-115148

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...

8.6CVSS6.5AI score0.00471EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/11/02 12:59 p.m.•8 views

CVE-2026-111560 OS Command Injection in Barracuda Appliances

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...

8.6CVSS6.5AI score0.00471EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/02 12:00 a.m.•5 views

PT-2026-135427

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...

8.6CVSS6.6AI score0.00471EPSS
SaveExploits0References30
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/02 12:00 a.m.•7 views

CVE-2026-111560: Barracuda Networks: Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance…

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...

8.6CVSS6.6AI score0.00471EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/31 10:08 a.m.•24 views

CVE-2020-24032

CVE-2020-24032 Suggested description tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. VulnerabilityType Other OS command injection Vendor of Product XoruX s.r.o. Affected Product Code Base LPAR2RRD and...

10CVSS8.8AI score0.05373EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/31 1:05 a.m.•26 views

CVE-2026-14669

CVE-2026-14669 - PostgreSQL tochar Timezone Abbreviation Heap Buffer Overflow PostgreSQL tochar function has a heap buffer overflow vulnerability when handling timezone formatting. By setting an overly long POSIX timezone abbreviation, an attacker can trigger an out-of-bounds write to a fixed...

8.8CVSS8.1AI score0.00662EPSS
SaveExploits1References3
Rows per page
Query Builder