235444 matches found
CVE-2025-6218-WinRAR-RCE-POC
CVE-2025-6218: WinRAR パストラバーサル RCE ⚠️ 重大な脆弱性 - 積極的な悪用が確認されました CVE-2025-6218 は、WinRAR におけるパストラバーサルの深刻な脆弱性で、任意のコード実行を可能にします。現在、APT グループ （GOFFEE、Bitter（APT-C-08）、Gamaredon など）によって悪用されています。 📋 目次 概要 技術的説明 エクスプロイトの仕組み 影響を受けるバージョン 攻撃シナリオ 脅威アクター 概念実証 検出とIOC 緩和策 タイムライン リポジトリ構成 参考情報 🎯 概要 CVE-2025-6218...
EUVD-2026-92784
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...
CVE-2026-78860
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...
CVE-2026-88392
Unimall v4 is vulnerable to a Directory Traversal flaw located in the FileUploadController.local() component. This vulnerability allows an attacker to traverse the file system and potentially execute arbitrary code . While the root cause is identified as a failure to properly limit pathnames to a...
Linux Distros Unpatched Vulnerability : CVE-2019-25777
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - YAML versions before 1.27001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob...
PT-2026-106196
Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0...
CVE-2026-78860
The Mercusys AC12 V2 is affected by a vulnerability that allows a local attacker to achieve arbitrary code execution . The root cause is identified as the storage of information in plaintext , which is associated with CWE-311 (Missing Encryption of Sensitive Data) and CWE-347 (Improper Verificati...
CVE-2026-78861
The Mercusys AC12 V2 is vulnerable to a flaw where a local attacker can execute arbitrary code . This vulnerability is caused by the inclusion of a hardcoded 512-bit RSA Private Key within the device. While the CVSS 3.1 score is 7.7 (High) , indicating high impact on confidentiality and integrity...
PT-2026-104752
Name of the Vulnerable Software and Affected Versions Perforce P4 Search versions prior to 2026.4.2 Description Container images reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can use this to obtain the highest...
EUVD-2026-92441
Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local. This allows an attacker to execute arbitrary code...
CVE-2026-88392
Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local. This allows an attacker to execute arbitrary code...
AlmaLinux 9.2 [TuxCare] Security Update: webkit2gtk3 / webkit2gtk3-devel / webkit2gtk3-jsc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791208722)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791208722 advisory. - Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer proce...
CVE-2026-105677: Improper Limitation of a Pathname to a Restricted Directory
Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0...
AlmaLinux 10 : osbuild-composer (ALSA-2026:66432)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66432 advisory. golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821...
CVE-2026-37719
An issue in dormakaba evolo Service all versions allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component...
CVE-2026-88392
Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local. This allows an attacker to execute arbitrary code...
CVE-2026-78862
An issue in the Mercusys AC12 V2 hardware allows a local attacker to achieve arbitrary code execution . This vulnerability is triggered via the UART serial interface located on the device's printed circuit board (PCB) . No specific software versions, remediation steps, or exploit links are provid...
EUVD-2026-92785
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...