247611 matches found
CVE-2026-54160
A flaw was found in Network UPS Tools NUT. The project's automated workflow improperly runs untrusted code submitted in pull requests within an environment that holds elevated write privileges. A remote attacker can exploit this flaw by submitting a malicious pull request to achieve arbitrary cod...
CVE-2014-6271-EXPLOIT
CVE-2014-6271 - Shellshock 💣 Shellshock는 GNU Bash 셸의 치명적인 취약점입니다. 버전 4.3까지 영향을 미치며, 원격 공격자가 임의의 코드를 실행할 수 있도록 합니다. 이 취약점은 Bash가 환경 변수 값에서 함수 정의 뒤에 오는 문자열을 처리하는 방식에서 발생합니다. 🔍 상세 설명 Shellshock 취약점은 공격자가 특수하게 조작된 환경 변수를 통해 코드를 주입하고 실행할 수 있게 합니다. 이러한 변수는 다양한 경로를 통해 설정될 수 있습니다: OpenSSH의 sshd에 있는...
CVE-2026-84154
A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary code on the server...
EUVD-2026-88654
In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set specifically crafted JSON content for the object. Insecure deserialization of this content allows the user to execute arbitrary code in the Octopus Server process...
CVE-2026-101169
In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set specifically crafted JSON content for the object. Insecure deserialization of this content allows the user to execute arbitrary code in the Octopus Server process...
CVE-2026-101169
In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can set specifically crafted JSON content for the object. Insecure deserialization of this content allows the user to execute arbitrary code in the Octopus Server process...
Malicious code in exprrdd (npm)
The package exprrdd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
Malicious code in express-nodejs (npm)
The package express-nodejs impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
Malicious code in exprdd (npm)
The package exprdd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
Malicious code in express-javascript (npm)
The package express-javascript impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
MAL-2026-17243 Malicious code in express-nodejs (npm)
The package express-nodejs impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
Malicious code in exptred (npm)
The package exptred impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
MAL-2026-17247 Malicious code in exptredd (npm)
The package exptredd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
Malicious code in exptredd (npm)
The package exptredd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
MAL-2026-17242 Malicious code in express-javascript (npm)
The package express-javascript impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
MAL-2026-17244 Malicious code in exprrdd (npm)
The package exprrdd impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
MAL-2026-17246 Malicious code in exptred (npm)
The package exptred impersonates the legitimate 'express' package it republishes express's package metadata and code and adds a malicious preinstall hook that runs automatically on npm install, before any dependency is installed: curl...
CVE-2026-84154 Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x
A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary code on the server...
CVE-2026-84154 Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x
A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary code on the server...
Multiple vulnerabilities in Pgpool-II
Overview Pgpool-II provided by Pgpool Global Development Group contains multiple vulnerabilities listed below: Out-of-bounds Write CWE-787 - CVE-2026-92867 Improper Certificate Validation CWE-295 - CVE-2026-92868 Out-of-bounds Write CWE-787 - CVE-2026-92869 Stack-based Buffer Overflow CWE-121 -...