Lucene search
+L

2690 matches found

GithubExploit
GithubExploit
added 2025/12/27 10:6 a.m.206 views

Exploit for Deserialization of Untrusted Data in Facebook React

🎯 CVE-2025-55182-advanced-scanner- - Detect and Exploit Vulner...

10CVSS7.5AI score0.99616EPSS
SaveExploits380
RedhatCVE
RedhatCVE
added 2025/12/12 10:17 p.m.8 views

CVE-2024-58294

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to...

8.8CVSS9AI score0.0331EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/12 12:30 a.m.10 views

EUVD-2024-55337

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to...

8.7CVSS8.4AI score0.0331EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/11 10:15 p.m.5 views

CVE-2024-58294

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to...

8.8CVSS6.6AI score0.0331EPSS
SaveExploits1References4
CVE
CVE
added 2025/12/11 9:36 p.m.21 views

CVE-2024-58294

CVE-2024-58294 affects FreePBX 16. An authenticated remote code execution vulnerability exists in the API module, exploitable by crafting malicious POST requests to the generatedocs endpoint with bash command injection to gain remote shell access. This is documented across multiple sources (NVD, ...

8.8CVSS8.6AI score0.0331EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/12/11 9:36 p.m.41 views

CVE-2024-58294 FreePBX 16 Authenticated Remote Code Execution via API Module

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to...

8.7CVSS0.0331EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.11 views

PT-2025-50748

Name of the Vulnerable Software and Affected Versions FreePBX version 16 Description FreePBX version 16 contains an authenticated remote code execution issue in the API module. An attacker with valid session credentials can execute arbitrary commands. The issue is exploitable through the...

8.8CVSS8.1AI score0.0331EPSS
SaveExploits1References6
GithubExploit
GithubExploit
added 2025/12/10 1:1 a.m.189 views

Exploit for CVE-2020-14882

WebLogic CVE-2020-14882 / CVE-2020-14883 Test Script This pro...

10CVSS7.7AI score0.99997EPSS
SaveExploits43
GithubExploit
GithubExploit
added 2025/12/07 8:30 p.m.273 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182: React Server Components RCE Scanner A compreh...

10CVSS8.3AI score0.99616EPSS
SaveExploits380
GithubExploit
GithubExploit
added 2025/12/05 3:38 p.m.290 views

Exploit for OS Command Injection in Gnu Bash

Exploiting Shellshock CVE-2014-6271: A Complete, Modern Demo...

10CVSS9.1AI score0.99999EPSS
SaveExploits139
OSV
OSV
added 2025/12/04 3:15 p.m.9 views

CVE-2025-54306

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability exists in the network configuration functionality, stemming from insufficient input validation when processing network configuration parameters through administrative...

7.2CVSS6.6AI score0.00791EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/04 12:0 a.m.7 views

EUVD-2025-201177

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability exists in the network configuration functionality, stemming from insufficient input validation when processing network configuration parameters through administrative...

8.1AI score0.00791EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/12/04 12:0 a.m.3 views

CVE-2025-54306

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability exists in the network configuration functionality, stemming from insufficient input validation when processing network configuration parameters through administrative...

8.2AI score0.00791EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.10 views

PT-2025-49043

Name of the Vulnerable Software and Affected Versions Thermo Fisher Torrent Suite Django application version 5.18.1 Description A remote code execution issue exists in the network configuration functionality due to inadequate input validation when handling network configuration parameters via...

7.2CVSS8.1AI score0.00791EPSS
SaveExploits0References8
CVE
CVE
added 2025/12/04 12:0 a.m.20 views

CVE-2025-54306

Summary: CVE-2025-54306 affects Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability arises from insufficient input validation in the network configuration flow accessed via /admin/network. User-controlled data is written to environment variables by Bash sc...

7.2CVSS8.2AI score0.00791EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/12/02 12:0 a.m.2 views

openSUSE 16 Security Update : bash-git-prompt (openSUSE-SU-2025:20130-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2025:20130-1 advisory. - CVE-2025-61659: Fixed an issue where predictable files in /tmp were used for a copy of the git index bsc1247489 Tenable has extracted the preceding...

6.8CVSS5.5AI score0.00132EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2025/12/01 12:0 a.m.3 views

Security update for bash-git-prompt (moderate)

openSUSE security update: security update for bash-git-prompt ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20130-1 Rating: moderate References: bsc1247489 Cross-References: CVE-2025-61659 Affected Products: openSUSE Leap 16.0...

6.8CVSS7.1AI score0.00132EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/26 12:0 a.m.6 views

OPENSUSE-SU-2025:15770-1 bash-git-prompt-2.7.1-4.1 on GA media

These are all security issues fixed in the bash-git-prompt-2.7.1-4.1 package on the GA media of openSUSE Tumbleweed...

6.8CVSS5.8AI score0.00132EPSS
SaveExploits0References1
Mageia
Mageia
added 2025/11/21 7:56 p.m.15 views

Updated konsole packages fix security vulnerability

KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...

8.2CVSS8.5AI score0.00571EPSS
SaveExploits0References3
OSV
OSV
added 2025/11/21 7:56 p.m.2 views

MGASA-2025-0308 Updated konsole packages fix security vulnerability

KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code...

8.2CVSS8.3AI score0.00571EPSS
SaveExploits0References4
Rows per page
Query Builder