Lucene search
+L

247339 matches found

BDU FSTEC
BDU FSTEC
•added 2026/10/05 12:00 a.m.•6 views

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from improper handling of code generation. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

9.9CVSS7.4AI score0.00526EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/10/05 12:00 a.m.•8 views

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from improper handling of code generation. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

10CVSS7.4AI score0.01248EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/10/05 12:00 a.m.•9 views

The vulnerability of the software platform for conducting marketing campaigns in Adobe Campaign Classic lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

9.1CVSS7.4AI score0.00991EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/10/05 12:00 a.m.•7 views

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from improper handling of code generation. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

10CVSS7.4AI score0.01248EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•10 views

PT-2026-104752

Name of the Vulnerable Software and Affected Versions Perforce P4 Search versions prior to 2026.4.2 Description Container images reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can use this to obtain the highest...

10CVSS6.3AI score0.00424EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•12 views

PT-2026-104774

DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...

9.3CVSS6.3AI score0.00087EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/05 12:00 a.m.•37 views

CVE-2026-88392

Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local. This allows an attacker to execute arbitrary code...

0.00692EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/05 12:00 a.m.•13 views

CVE-2026-88392

Unimall v4 is vulnerable to a Directory Traversal flaw located in the FileUploadController.local() component. This vulnerability allows an attacker to traverse the file system and potentially execute arbitrary code . While the root cause is identified as a failure to properly limit pathnames to a...

7.5CVSS6.7AI score0.00692EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•6 views

PT-2026-105997

Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local. This allows an attacker to execute arbitrary code...

6.7AI score0.00692EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/05 12:00 a.m.•28 views

CVE-2026-78860

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...

0.00084EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/05 12:00 a.m.•13 views

CVE-2026-78860

The Mercusys AC12 V2 is affected by a vulnerability that allows a local attacker to achieve arbitrary code execution . The root cause is identified as the storage of information in plaintext , which is associated with CWE-311 (Missing Encryption of Sensitive Data) and CWE-347 (Improper Verificati...

7.8CVSS6.6AI score0.00084EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/05 12:00 a.m.•29 views

CVE-2026-78861

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...

0.00136EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/05 12:00 a.m.•12 views

CVE-2026-78861

The Mercusys AC12 V2 is vulnerable to a flaw where a local attacker can execute arbitrary code . This vulnerability is caused by the inclusion of a hardcoded 512-bit RSA Private Key within the device. While the CVSS 3.1 score is 7.7 (High) , indicating high impact on confidentiality and integrity...

7.7CVSS6.6AI score0.00136EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/05 12:00 a.m.•12 views

CVE-2026-78862

An issue in the Mercusys AC12 V2 hardware allows a local attacker to achieve arbitrary code execution . This vulnerability is triggered via the UART serial interface located on the device's printed circuit board (PCB) . No specific software versions, remediation steps, or exploit links are provid...

7.4AI score0.00175EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/05 12:00 a.m.•6 views

EUVD-2026-92785

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...

6.6AI score0.00136EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/05 12:00 a.m.•6 views

EUVD-2026-92786

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...

6.6AI score0.00084EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•7 views

PT-2026-106221

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...

6.6AI score0.00136EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•8 views

PT-2026-106192

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...

6.6AI score0.00084EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•6 views

PT-2026-106050

Name of the Vulnerable Software and Affected Versions HyperShift operator affected versions not specified Description A flaw in the HyperShift operator allows a tenant isolation bypass. The operator copies user-provided Kubernetes configuration kubeconfig secrets into the privileged control plane...

8.8CVSS6.3AI score0.00422EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•4 views

CVE-2026-88392: Undefined Security Weakness

Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local. This allows an attacker to execute arbitrary code...

7.5CVSS6.7AI score0.00692EPSS
SaveExploits0References2
Rows per page
Query Builder