Lucene search
+L

233005 matches found

RedHat Linux
RedHat Linux
•added 2026/09/30 2:04 p.m.•4 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.16 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

9.8CVSS6.1AI score0.0215EPSS
SaveExploits6References13
RedHat Linux
RedHat Linux
•added 2026/09/30 2:04 p.m.•5 views

com.mchange/mchange-commons-java: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects

A flaw was found in mchange-commons-java, a Java utility library. An attacker can exploit this vulnerability by providing a maliciously crafted javax.naming.Reference or serialized object to an application using the library. This can provoke the application to download and execute arbitrary...

9.8CVSS6.6AI score0.01585EPSS
SaveExploits1References8
Kitploit
Kitploit
•added 2026/09/30 1:41 p.m.•8 views

CVE-2020-14882

CVE-2020-14882 desplegando un memory shell de Behinder Como es bien sabido, CVE-2020-14882 es una vulnerabilidad no autenticada que permite a un atacante ejecutar código arbitrario en el WebLogic Server afectado. En los PoC públicos, el acceso se logra mediante la omisión de caracteres ilegales y...

10CVSS9.2AI score0.99997EPSS
SaveExploits42
Kitploit
Kitploit
•added 2026/09/30 1:29 p.m.•11 views

exploit-CVE-2021-22204

Exploit para CVE-2021-22204 ExifTool - Ejecución Arbitraria de Código ¿Te gusta este repositorio? ¡Dale una ⭐! Solo con fines educativos y de investigación de seguridad autorizada. Autor del Exploit @UNICORDev por @NicPWNs y @Dev-Yeoj Descripción de la Vulnerabilidad La neutralización incorrecta ...

7.8CVSS7.9AI score0.99981EPSS
SaveExploits39References3
Kitploit
Kitploit
•added 2026/09/30 1:10 p.m.•14 views

CVE-2023-25581

Este script en Python demuestra la explotación de la vulnerabilidad CVE-2023-25581 en pac4j-core. La vulnerabilidad permite a un atacante ejecutar código arbitrario RCE mediante la deserialización de datos codificados en Base64 maliciosamente manipulados. Requisitos previos Antes de ejecutar el...

9.2CVSS6AI score0.01936EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/30 12:36 p.m.•15 views

CVE-2025-25014

POC para CVE-2025-25014 Una vulnerabilidad de contaminación de prototipos en Kibana conduce a la ejecución de código arbitrario a través de solicitudes HTTP manipuladas a los endpoints de aprendizaje automático y generación de informes. Actualmente este POC solo detecta instancias vulnerables. Us...

9.8CVSS9AI score0.21483EPSS
SaveExploits2
Cvelist
Cvelist
•added 2026/09/30 12:27 p.m.•5 views

CVE-2026-96343 WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

7.2CVSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 12:27 p.m.•3 views

EUVD-2026-89856

Custom role PHP Object Injection in WP ERP = 1.17.9 versions...

7.2CVSS5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/30 12:14 p.m.•14 views

printix-CVE-2022-29554

CVE-2022-29554 Publicación simple | Versión para imprimir Una vulnerabilidad de "Manejo incorrecto de entrada a la API" o "Método o función peligrosos expuestos" en PrintixService.exe, en la "Gestión de impresión segura en la nube de Printix" de Kofax Printix, versión 1.3.1156.0 e inferiores,...

5.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/09/30 11:44 a.m.•26 views

The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) lies in the use of memory after deallocation during the processing of specially created VVC streams. This allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

7.8CVSS7.2AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/30 11:44 a.m.•19 views

The vulnerability of the `createSubPicRefBufs` function in the vvdecapp (VVdeC) decoder allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

7.8CVSS6.7AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/30 11:43 a.m.•50 views

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.7CVSS6.2AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/30 11:43 a.m.•29 views

The vulnerability of the “Tekon” SCADA system, which exists due to the lack of measures to neutralize specific elements, allows for the execution of arbitrary codes.

The vulnerability of the “Tekon” SCADA system exists due to the lack of measures taken to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

8.8CVSS6.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/30 11:43 a.m.•48 views

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system (CMS) like 1C-Bitrix. This feature allows unauthorized users to execute arbitrary code by enabling unlimited uploading of dangerous types of files.

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

6.4CVSS6AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/30 11:43 a.m.•29 views

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/09/30 11:43 a.m.•27 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

9CVSS6.2AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/09/30 11:43 a.m.•24 views

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

9CVSS6.1AI score
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/09/30 11:43 a.m.•37 views

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/30 11:43 a.m.•34 views

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/09/30 11:43 a.m.•33 views

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

10CVSS6AI score
SaveExploits0Affected Software1
Rows per page
Query Builder