1118077 matches found
CVE-2026-74886 openssl_encrypt before 1.4.0 Plugin Import Guard Bypass
opensslencrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUSMODULES set. Attackers can bypass AST analysis through string obfuscation or encoding to import unblocked dangerous...
EUVD-2026-60106
opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...
CVE-2026-74886
In openssl_encrypt before 1.4.0, PluginImportGuard blocks a different module set than the AST analyzer's DANGEROUS_MODULES, allowing attackers to bypass AST checks via string obfuscation and import modules like sys, pickle, or multiprocessing for arbitrary code execution. CVSS 9.8 critical. No in...
CVE-2026-74872
opensslencrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the whirlpoolpy313.so pattern in...
EUVD-2026-60091
opensslencrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the whirlpoolpy313.so pattern in...
PCP: PCP pmproxy: Unauthenticated access to /store endpoint allows bypassing pmcd access rules
An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PMDA metric, leading to arbitrary code execution and system takeover...
CVE-2026-74845
Official Document Management System developed by 2100 Technology has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
CVE-2026-74845
CVE-2026-74845 concerns the Official Document Management System by 2100 Technology, with an Arbitrary File Upload vulnerability that enables authenticated remote attackers to upload and execute web shell backdoors, leading to arbitrary code execution on the server. From the connected references, ...
CVE-2026-74845 2100 Technology｜Official Document Management System - Arbitrary File Upload
Official Document Management System developed by 2100 Technology has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
EUVD-2026-60077
Official Document Management System developed by 2100 Technology has an Arbitrary File Upload vulnerability, allowing authenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
MINI-27M9-95WQ-5F7H
Bulletin has no description...
MINI-5MX4-CGWH-J589
Bulletin has no description...
MINI-QJX8-GFJ5-6729
Bulletin has no description...
MINI-9VQ2-X7FJ-P4GP
Bulletin has no description...
MINI-V8JR-7WH7-2J59
Bulletin has no description...
MINI-PXF8-9G5P-26FJ
Bulletin has no description...
MINI-5M2X-PF96-MQ29
Bulletin has no description...
MINI-HFCR-CF4Q-P674
Bulletin has no description...