Lucene search
+L

115640 matches found

osv_cve
osv_cve
•added 2026/06/02 12:45 a.m.•22 views

CVE-2026-10550 elunez eladmin Application Deployment App.java command injection

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploi...

5.3CVSS6.2AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/06/02 12:45 a.m.•69 views

CVE-2026-10550 elunez eladmin Application Deployment App.java command injection

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS0.01067EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/06/02 12:31 a.m.•29 views

EUVD-2026-33835

A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function addreview/savereview/getallreviews of the file reviewapp.py. Performing a manipulation of the argument name/comment results in denial of service. The attack requires a local approac...

4.8CVSS5.5AI score0.0012EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/06/02 12:31 a.m.•32 views

EUVD-2025-210025

Memory corruption in windows drivers while sending incorrect trusted application request...

6.7CVSS5.8AI score0.00078EPSS
SaveExploits0References2
CNVD
CNVD
•added 2026/06/02 12:00 a.m.•29 views

IBM WebSphere Application Server identity spoofing vulnerability

IBM WebSphere Application Server is a Java enterprise application server developed by IBM. It is primarily used for deploying and managing enterprise-level web applications. IBM WebSphere Application Server has a vulnerability known as “Identity Spoofing.” This vulnerability arises from the failu...

9.1CVSS5.4AI score0.0033EPSS
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/06/02 12:00 a.m.•28 views

WebADM Security Auditor and Content Exposure Scanner

This Python script is a defensive security auditing tool designed to analyze a target web application for potential information exposure and security misconfigurations, specifically focusing on environments resembling WebADM. This was tested on version 2.4.17-1...

5.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/06/02 12:00 a.m.•33 views

TOR Virtual Network Tunneling Tool 0.4.9.9

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow...

5.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/02 12:00 a.m.•51 views

PT-2026-45678

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS6.1AI score0.01067EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•13 views

CVE-2024-42206: Undefined Security Weakness

HCL iReflection Third party vulnerable and outdated components issue was detected in the web application...

3.1CVSS5.8AI score0.00151EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/02 12:00 a.m.•38 views

PT-2026-45793

HCL iReflection Third party vulnerable and outdated components issue was detected in the web application...

3.1CVSS5.8AI score0.00151EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/02 12:00 a.m.•29 views

ELADMIN command injection vulnerability

ELADMIN is a backend management system developed by elunez’s individual developer. Versions of ELADMIN 2.7 and earlier had a command injection vulnerability. This vulnerability stemmed from the operation of the uploadPath parameter in the App.java file within the Application Deployment Module...

6.5CVSS6.7AI score0.01067EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/06/02 12:00 a.m.•43 views

IBM WebSphere Application Server 8.5.x < 8.5.5.30 / 9.x < 9.0.5.29 Identity Spoofing (7274740)

The version of IBM WebSphere Application Server running on the remote host is affected by an identity spoofing vulnerability as referenced in the 7274740 advisory. - IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing. CVE-2026-8644 Note that Nessus has not tested for...

9.1CVSS6AI score0.0033EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/06/02 12:00 a.m.•28 views

A Hybrid Approach for Malware Classification Using Secondary Features Fusion

The number of malware either variant or novel is rapidly increasing, making malware detection and mitigation a complex problem. One approach to improving malware mitigation is automatic detection and malware family classification. However, traditional malware detection methods cannot classify...

5.8AI score
SaveExploits0
CNVD
CNVD
•added 2026/06/02 12:00 a.m.•50 views

IBM WebSphere Application Server code issue vulnerability (CNVD-2026-23396)

IBM WebSphere Application Server is an enterprise-level Java application server, primarily used for deploying and managing Java EE applications. There are security vulnerabilities in IBM WebSphere Application Server. These vulnerabilities stem from the SAML Web Single Sign-On component, which fai...

8.5CVSS6.3AI score0.00515EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•9 views

CVE-2026-10550: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java of the component Application Deployment Module. This manipulation of the argument uploadPath causes command injection. Remote exploitation of the attack is possible. The exploi...

6.5CVSS6.1AI score0.01067EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/02 12:00 a.m.•43 views

Prefect security vulnerability

Prefect is a workflow orchestration tool developed by Prefect OpenSource, enabling developers to build, monitor data pipelines, and respond to changes in those pipelines. Version 3.6.19 of Prefect contains a security vulnerability. This vulnerability stems from improper handling of URL paths for...

7.5CVSS7.2AI score0.00476EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/06/02 12:00 a.m.•51 views

PT-2026-45830

Name of the Vulnerable Software and Affected Versions wire-ios versions prior to 4.16.0 Description The application crashes automatically upon receiving a specially crafted Proteus external message containing an encrypted payload shorter than 16 bytes. This occurs without user interaction. Becaus...

6.5CVSS5.7AI score0.00235EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/06/02 12:00 a.m.•40 views

Cisco Application Policy Infrastructure Controller DoS (cisco-sa-apic-dos-rNus8EFw)

According to its self-reported version, Cisco Application Policy Infrastructure Controller is affected by a vulnerability. - A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, local attacker to cause an affect...

5.5CVSS5.8AI score0.001EPSS
SaveExploits0References3
NVD
NVD
•added 2026/06/01 11:16 p.m.•33 views

CVE-2025-59612

Memory corruption in windows drivers while sending incorrect trusted application request...

6.7CVSS0.00078EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/01 10:05 p.m.•20 views

CVE-2025-59612

Memory corruption in windows drivers while sending incorrect trusted application request...

6.7CVSS5.8AI score0.00078EPSS
SaveExploits0References2
Rows per page
Query Builder