1134544 matches found
LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-
= doi.org/10.5281/zenodo.18278567 = orcid.org/0009-0007-7728-256X 💀 LlamaStack-RCE: CVE-2024-50050 Supply Chain Exploitation Framework UNRESTRICTED CLASSIFIED MATERIAL - FOR AUTHORIZED RED TEAMING ONLY 1. Executive Summary Deterministic Analysis LlamaStack-RCE is a high-fidelity simulation and...
CVE-2026-73782 Unauthenticated Format String Vulnerability leads to Remote Code Execution in AOS-CX
A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...
CVE-2026-73782
CVE-2026-73782 is an unauthenticated format string vulnerability in the command line interface of HPE AOS-CX . Successful exploitation allows execution of arbitrary code as a privileged user on the underlying operating system, leading to full compromise of confidentiality, integrity, and availabi...
EUVD-2026-69645
A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...
CVE-2026-73776 Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of th...
CVE-2026-73776 Authenticated Signature Verification Bypass Leading to Arbitrary Code Execution in AOS-CX
A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of th...
CVE-2026-73776
CVE-2026-73776 is a signature verification bypass in the command line interface of HPE AOS-CX . An authenticated actor with administrative privileges can exploit it to execute arbitrary code on the underlying operating system, though certain pre-conditions outside the attacker's control must also...
EUVD-2026-69639
A signature verification bypass vulnerability exists in the command line interface of AOS-CX. Successful exploitation could allow an authenticated malicious actor with administrative privileges to execute arbitrary code on the underlying operating system, when certain pre-conditions outside of th...
CVE-2026-73770
CVE-2026-73770 is an authenticated arbitrary file write vulnerability in AOS-CX (HPE ArubaOS for campus switching). A malicious actor with authenticated access can, under specific conditions outside their control and requiring action by another user, create or modify arbitrary files and execute c...
CVE-2026-73770 Authenticated Arbitrary File Write Vulnerability Leading to Remote Code Execution in AOS-CX
An authenticated arbitrary file write vulnerability exists in AOS-CX. Successful exploitation could allow an authenticated malicious actor, under specific conditions outside the attacker's control and following a required action by another user, to create or modify arbitrary files and execute...
CVE-2026-73765
Authenticated path traversal vulnerabilities in API endpoints of HPE AOS-CX (ArubaOS CX) allow an attacker with valid credentials to write arbitrary files to the underlying operating system, potentially leading to remote code execution . The CVSS v3.1 base score is 7.2 (HIGH) , reflecting network...
CVE-2026-73765 Authenticated Path Traversal Vulnerabilities Lead to Remote Code Execution in AOS-CX
Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...
EUVD-2026-69629
Authenticated path traversal vulnerabilities exist in API endpoints of AOS-CX. Successful exploitation of these vulnerabilities allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...
EUVD-2026-69627
A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility...
CVE-2026-73763 Unauthenticated Remote Command Execution in Management Component
A vulnerability exists in a management component that could allow an unauthenticated adjacent attacker to execute arbitrary commands. Successful exploitation could result in remote execution of arbitrary commands in the context of the affected utility...
CVE-2025-32433
CVE-2025-32433 引言 本文件介绍了影响 Erlang/OTP 平台内置 SSH 服务器实现的漏洞 CVE-2025-32433 。 该漏洞是一种无需身份验证即可远程执行任意代码 RCE 的漏洞,影响多个 Erlang/OTP 分支(补丁发布前): 27 版本至 27.3.3 26 版本至 26.2.5.11 25 版本至 25.3.2.20 Erlang/OTP 被广泛用作可扩展分布式系统的基础,并集成在许多知名项目的技术栈中(例如即时通讯软件、消息代理、高负载 Web 服务)。 SSH 基础库中存在关键的 RCE 漏洞,使得使用 Erlang/OTP 作为服务器或具有开放...
CVE-2026-73753
CVE-2026-73753 is an authenticated remote command injection vulnerability in the HPE ArubaOS-CX (AOS-CX) Command Line Interface . Through affected command-line operations, an authenticated low-privileged user can execute arbitrary commands with privileged user permissions on the underlying operat...
CVE-2025-55182
👻 CVE-2025-55182 Go 漏洞利用工具 针对 CVE-2025-55182(React Server Components)的交互式 RCE 利用工具 🎯 这是什么? CVE-2025-55182 是一个轻量级交互式 RCE 利用工具,针对 CVE-2025-55182 ——React Server Components(RSC)中的一个严重漏洞,影响 React 19.0.0 - 19.2.0 及 Next.js 应用。 📦 安装 前置条件 Go 1.18 或更高版本 运行 React 19.0.0 - 19.2.0 的脆弱目标 从源码构建 root@kitploit:...
CVE-2026-73752
An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX (HPE). Successful exploitation allows an attacker to write arbitrary files to the underlying operating system, potentially leading to remote code execution . The CVSS 3.1 base score is 8.8 (HIGH) , with an a...
CVE-2026-73752 Unauthenticated Arbitrary File Write Vulnerability Leads to Remote Code Execution in AOS-CX
An unauthenticated arbitrary file write vulnerability exists in an API endpoint of AOS-CX. Successful exploitation of this vulnerability allows an attacker to write arbitrary files to the underlying operating system, which could lead to remote code execution...