Lucene search
+L

369660 matches found

Nuclei
Nuclei
added 2 days ago126 views

Apache Spark UI - Remote Command Injection

Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilte...

8.8CVSS8.4AI score0.93076EPSS
SaveExploits12References5
Nuclei
Nuclei
added 2 days ago116 views

Adobe ColdFusion - Pre-Auth Remote Code Execution

Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...

9.8CVSS8.9AI score0.99989EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2 days ago179 views

Adobe ColdFusion - Deserialization of Untrusted Data

Adobe ColdFusion versions 2018u17 and earlier, 2021u7 and earlier and 2023u1 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-38203 info: name:...

9.8CVSS8.9AI score0.96716EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2 days ago126 views

Juniper J-Web - Remote Code Execution

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables to execute remote commands id: CVE-2023-36845 info: name: Juniper J-Web - Remote Code...

9.8CVSS7.9AI score0.93546EPSS
SaveExploits26References5
Nuclei
Nuclei
added 2 days ago11 views

React Native Community CLI - Unauthenticated OS Command Injection

The Metro development server started by the React Native Community CLI binds to external network interfaces by default and exposes an unauthenticated /open-url endpoint. Affected versions pass the attacker supplied url value straight to the open helper without validating the scheme, allowing an...

9.8CVSS8.4AI score0.9398EPSS
SaveExploits5References5
Nuclei
Nuclei
added 2 days ago97 views

Gogs 0.5.5 - 0.12.2 - Remote Code Execution

Gogs 0.5.5 through 0.12.2 is susceptible to authenticated remote code execution via the git hooks functionality. There can be a privilege escalation if access to this feature is granted to a user who does not have administrative privileges. NOTE: Since this is mentioned in the documentation but n...

7.2CVSS7.9AI score0.87153EPSS
SaveExploits3References4
Nuclei
Nuclei
added 2 days ago35 views

Icinga Web 2 - Arbitrary File Disclosure

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including icingaweb2 configuration files with database credentials. id: CVE-2022-24716 info:...

7.5CVSS7.5AI score0.89378EPSS
SaveExploits8References5
Nuclei
Nuclei
added 2 days ago125 views

WordPress BackupGuard <1.6.0 - Authenticated Arbitrary File Upload

WordPress Backup Guard plugin before 1.6.0 is susceptible to authenticated arbitrary file upload. The plugin does not ensure that imported files are in SGBP format and extension, allowing high-privilege users to upload arbitrary files, including PHP, possibly leading to remote code execution. id:...

7.2CVSS8.1AI score0.84112EPSS
SaveExploits9References5
Nuclei
Nuclei
added 2 days ago50 views

Microsoft Open Management Infrastructure - Remote Code Execution

Microsoft Open Management Infrastructure is susceptible to remote code execution OMIGOD. id: CVE-2021-38647 info: name: Microsoft Open Management Infrastructure - Remote Code Execution author: daffainfo,xstp severity: critical description: Microsoft Open Management Infrastructure is susceptible t...

9.8CVSS8.2AI score0.99933EPSS
SaveExploits19References5
Nuclei
Nuclei
added 2 days ago44 views

Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure

Webmin before 1.290 and Usermin before 1.220 contain a path traversal caused by calling the simplifypath function before decoding HTML, letting remote attackers read arbitrary files, exploit requires sending crafted '..%01' sequences. id: CVE-2006-3392 info: name: Webmin 1.290 / Usermin 1.220 -...

5CVSS8.6AI score0.78286EPSS
SaveExploits4References2
Nuclei
Nuclei
added 2 days ago121 views

Moodle - Remote Code Execution

Attackers with the permission to create or modify questions in Moodle courses are able to craft malicious inputs for calculated questions, which can be abused to execute arbitrary commands on the underlying system. id: CVE-2024-43425 info: name: Moodle - Remote Code Execution author:...

8.1CVSS8.7AI score0.8322EPSS
SaveExploits8References4
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-57105

The ProSolution WP Client WordPress plugin before 2.0.9 does not validate a user-supplied URL, and does not check the capability or nonce of the requester, before performing a server-side HTTP request with it, allowing any authenticated user, such as a subscriber, to make the site issue arbitrary...

6.4CVSS5.3AI score0.00138EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-19050

The ProSolution WP Client WordPress plugin before 2.0.9 does not validate a user-supplied URL, and does not check the capability or nonce of the requester, before performing a server-side HTTP request with it, allowing any authenticated user, such as a subscriber, to make the site issue arbitrary...

5.3AI score0.00138EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2 days ago29 views

CVE-2026-19050 ProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validate

The ProSolution WP Client WordPress plugin before 2.0.9 does not validate a user-supplied URL, and does not check the capability or nonce of the requester, before performing a server-side HTTP request with it, allowing any authenticated user, such as a subscriber, to make the site issue arbitrary...

0.00138EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago26 views

CVE-2026-18943

The vulnerability CVE-2026-18943 affects the WPC Admin Columns WordPress plugin before version 2.3.4. One of the plugin’s AJAX actions lacks proper authorization checks, enabling users with a role as low as subscriber to read arbitrary user, post, and term metadata, including data belonging to ad...

6.5CVSS5.4AI score0.00219EPSS
SaveExploits0References1
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-57095

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not validate a client-controlled value used to build a file path in one of its public endpoint actions, and performs no authorisation check on it, allowing unauthenticated attackers to delete arbitrary ZIP archives on the server,...

7.5CVSS5.5AI score0.00243EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2 days ago28 views

CVE-2026-18048 WP Photo Album Plus < 9.2.07.002 - Unauthenticated Arbitrary ZIP File Deletion via delmyzip Path Traversal

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not validate a client-controlled value used to build a file path in one of its public endpoint actions, and performs no authorisation check on it, allowing unauthenticated attackers to delete arbitrary ZIP archives on the server,...

0.00243EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2 days ago5 views

CVE-2026-18048

The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not validate a client-controlled value used to build a file path in one of its public endpoint actions, and performs no authorisation check on it, allowing unauthenticated attackers to delete arbitrary ZIP archives on the server,...

5.5AI score0.00243EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago30 views

CVE-2026-18048

The WP Photo Album Plus WordPress plugin, prior to version 9.2.07.002, fails to validate a client-controlled value used to build a file path in a public endpoint action and does not perform an authorization check. This allows unauthenticated attackers to delete arbitrary ZIP archives on the serve...

7.5CVSS5.5AI score0.00243EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2 days ago7 views

CVE-2026-16066

The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting it on the product pages, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of any visitor viewing the product page...

5.5AI score0.00162EPSS
SaveExploits0References1
Rows per page
Query Builder