Lucene search
+L

1106892 matches found

Cvelist
Cvelist
added 45 minutes ago4 views

CVE-2026-65617 Potential remote code execution on an Artifactory package service container.

A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions...

8.8CVSS
SaveExploits0References2
Cvelist
Cvelist
added 55 minutes ago4 views

CVE-2026-56748 Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link...

8.8CVSS
SaveExploits0References2
EUVD
EUVD
added 1 hour ago4 views

EUVD-2026-49369

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...

9.8CVSS6.5AI score
SaveExploits0References2
EUVD
EUVD
added 1 hour ago3 views

EUVD-2026-49331

phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the configuration API that allows authenticated administrators with CONFIGURATIONEDIT and ATTACHMENTADD privileges to write arbitrary PHP files by manipulating the upgrade.lastDownloadedPackage setting. Attackers can upload ...

9.4CVSS6.6AI score
SaveExploits0References3
EUVD
EUVD
added 1 hour ago4 views

EUVD-2026-49370

NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure...

7.8CVSS5.9AI score
SaveExploits0References3
EUVD
EUVD
added 1 hour ago3 views

EUVD-2026-49357

sqlite 3.41 has a use-after-free UAF vulnerability in the ORDER BY clause parsing routine. The affected code first releases the memory of an ExprList object via sqlite3ExprListDelete, then attempts to access the nExpr member of the already freed object. This dangling pointer access causes invalid...

7.5CVSS6.6AI score
SaveExploits0References3
EUVD
EUVD
added 1 hour ago3 views

EUVD-2025-210522

SQL injection vulnerability exists in the orderby parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments = 1.5.1. The vulnerability arises from unsanitized user input passed to the orderby method of the CodeIgniter Query Builder, enabling attackers to perform time-based...

9.1CVSS6.6AI score
SaveExploits1References4
EUVD
EUVD
added 1 hour ago3 views

EUVD-2026-49355

SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, and the subsequent exprComputeOperands function continues to access the already freed register memory. By supplying a...

6.4AI score
SaveExploits0References3
EUVD
EUVD
added 1 hour ago3 views

EUVD-2026-49352

sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial...

8.8CVSS6AI score
SaveExploits0References3
NVD
NVD
added 2 hours ago3 views

CVE-2026-55579

Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, Pheditor ships with a hardcoded default password admin SHA-512 hash stored at pheditor.php:11. There is no mechanism to force a password change on first login. Any deployment using the...

9.8CVSS
SaveExploits0References2
NVD
NVD
added 2 hours ago3 views

CVE-2026-48030

Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.4, an OS Command Injection vulnerability in the terminal action handler allows any authenticated user to execute arbitrary OS commands by injecting shell metacharacters into the 'dir' POST...

9.9CVSS0.00161EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2 hours ago5 views

CVE-2026-55579 Pheditor: Hardcoded default password 'admin' with no forced change enables full application compromise

Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, Pheditor ships with a hardcoded default password admin SHA-512 hash stored at pheditor.php:11. There is no mechanism to force a password change on first login. Any deployment using the...

9.8CVSS
SaveExploits0References2
CVE
CVE
added 2 hours ago32 views

CVE-2026-48030

Summary: CVE-2026-48030 affects pheditor (PHP) prior to 2.0.4. An OS command injection exists in the terminal action handler by unsafely using the POST parameter and injecting the directory path into shell_exec() without sanitization. This allows an authenticated user with terminal permission to ...

9.9CVSS6.2AI score0.00161EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2 hours ago4 views

CVE-2026-48030 Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)

Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.4, an OS Command Injection vulnerability in the terminal action handler allows any authenticated user to execute arbitrary OS commands by injecting shell metacharacters into the 'dir' POST...

9.9CVSS0.00161EPSS
SaveExploits1References2
NVD
NVD
added 3 hours ago4 views

CVE-2026-63077

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...

9.8CVSS
SaveExploits0References1
NVD
NVD
added 3 hours ago3 views

CVE-2026-24252

NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure...

7.8CVSS
SaveExploits0References3
Cvelist
Cvelist
added 3 hours ago8 views

CVE-2026-63077

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol...

9.8CVSS
SaveExploits0References1
Cvelist
Cvelist
added 3 hours ago8 views

CVE-2026-24252

NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure...

7.8CVSS
SaveExploits0References3
CVE
CVE
added 3 hours ago19 views

CVE-2026-24252

NVIDIA NeMo for Linux has a reported vulnerability CVE-2026-24252 enabling OS command injection. The issue is documented in NVIDIA’s June 2026 Security Bulletin and corroborated by multiple sources. Affected component: NeMo Framework for Linux (library/implementation used on Linux). Root cause: c...

7.8CVSS5.9AI score
SaveExploits0References3
NVD
NVD
added 4 hours ago4 views

CVE-2026-66395

SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in the bazaar plugin readme handler that allows attackers to execute arbitrary code by crafting a malicious siyuan:// deep link. Attackers can inject HTML payloads via the plugin name parameter that execute with...

9.6CVSS
SaveExploits0References2
Rows per page
Query Builder