283599 matches found
EUVD-2026-88089
A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...
CVE-2026-101003
Cesanta Mongoose versions up to 7.21 are vulnerable to a stack-based buffer overflow within the MQTT Broker component. The flaw exists in the fn function located in tutorials/mqtt/mqtt-server/main.c. A remote attacker can trigger this vulnerability through a manipulation, potentially leading to a...
CVE-2026-101003 Cesanta Mongoose MQTT Broker main.c fn stack-based overflow
A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...
CVE-2026-101003 Cesanta Mongoose MQTT Broker main.c fn stack-based overflow
A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...
CVE-2026-101001
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...
CVE-2026-100909
A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/classes/ResizeImages.php. The manipulation of the argument realSourcePath results in server-side request forgery. The attack may be performed...
CVE-2026-101000
A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file /usr/share/rpcd/acl.d/unauthenticated.json of the component ACL Handler. This manipulation of the argument section causes missing authorization. It is possible to initiate the...
CVE-2026-87723
In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...
CVE-2026-100908
A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...
CVE-2026-100907
A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. This manipulation causes information disclosure. The attack is possible to be carried out remotely. The exploit has been published and may be used...
CVE-2026-101002
A security flaw exists in Netcore NBR200V2 version 1.3.241127.071246 . The vulnerability is located in the Tools Ping Handler component, specifically within the system function of the /usr/bin/network_tools file. By manipulating the url argument, an unauthenticated remote attacker can trigger an ...
CVE-2026-101002 Netcore NBR200V2 Tools Ping network_tools system os command injection
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...
CVE-2026-101002 Netcore NBR200V2 Tools Ping network_tools system os command injection
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...
EUVD-2026-88084
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file /usr/bin/networktools of the component Tools Ping Handler. Performing a manipulation of the argument url results in os command injection. The attack can be initiated remotely. Th...
CVE-2022-25365
CVE-2022-25365 Windows용 Docker Desktop의 권한 상승 취약점 reference: https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-1 파일 목록 poc.py 제작: followboy1999 createsymlink.exe 제작: James Forshaw junction64.exe 제작: Mark...
CVE-2023-22515
CVE-2023-22515 关于 CVE-2023-22515 的主要信息 受影响产品: Atlassian Confluence Data Center & Confluence Server。 公开日期: 2023年10月4日。 严重程度: Critical（CVSS 10.0）。 漏洞类型: Broken Access Control / Improper Authorization → 允许攻击者远程创建管理员账户 。 漏洞位于 Confluence setup 机制 中。 影响范围: Confluence Data Center & Server 8.0.0 → 8.5.1 ...
EUVD-2026-88083
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...
CVE-2026-101001 Netcore NBR200V2 Web Management network_tools eval os command injection
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...
CVE-2026-101001
A critical os command injection vulnerability exists in the Web Management Interface of Netcore NBR200V2 1.3.241127.071246 . The flaw is located in the eval function of the /www/cgi-bin/network_tools file, where manipulation of the QUERY_STRING argument allows for remote attack execution. An expl...
CVE-2026-101001 Netcore NBR200V2 Web Management network_tools eval os command injection
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...