496984 matches found
CVE-2025-50330
Vulnerability detail: ZipGenius Team ZipGenius
CVE-2025-50329
CVE-2025-50329 affects ConeXware, Inc. Power Archiver
CVE-2025-50330
An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate privileges and execute arbitrary code via the zipgenius.exe...
CVE-2025-50329
An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...
The vulnerability of the get_items() function in the WordPress content management system allows a hacker to bypass security restrictions, execute arbitrary code, and gain unauthorized access to protected information.
The vulnerability of the getitems function in the WordPress content management system is related to the occurrence of synchronization issues between the permission check array, the allowed endpoints list, and the execution array. Exploiting this vulnerability could allow an attacker to bypass...
PT-2026-63404
Name of the Vulnerable Software and Affected Versions Telerik UI for AJAX versions prior to 2026.2.708 Description A deserialization issue in the persistence utilities allows unsafe type instantiation from an attacker-influenced persisted state, which can lead to remote code execution...
EUVD-2025-210500
An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a bypass of the Mark-of-the-Web protection mechanism...
Oracle Linux 10 : nginx (ELSA-2026-19159)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19159 advisory. - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-420...
RockyLinux 8 : pki-deps:10.6 (RLSA-2026:43218)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:43218 advisory. jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution CVE-2026-54513 Tenable has extracted the preceding description block directly...
Plone 4.3.x < 5.2.5 Multiple Vulnerabilities (HF 20210518)
The version of Plone installed on the remote host is 4.3.x prior to 5.2.5. It is, therefore, affected by the following vulnerabilities: - Plone CMS has a stored Cross-Site Scripting XSS vulnerability in the user fullname property and the file upload functionality. CVE-2021-3313 -...
CVE-2025-50329
An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...
CVE-2025-50324
CVE-2025-50324 affects Milos Paripovic OneCommander v3.96.0.0. The issue allows a remote attacker to execute arbitrary code via the OneCommander.exe component. CVSS 3.1 base score 8.8 (NETWORK/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Documents do not provide exploitation details or remediation guida...
EUVD-2025-210503
An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary code via downloading and executing a crafted archive file...
EUVD-2025-210502
An issue in Milos Paripovic OneCommander v.3.96.0.0 allows a remote attacker to execute arbitrary code via the OneCommander.exe component...
Уязвимость компонента V8 браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код внутри песочницы
Уязвимость компонента V8 браузеров Google Chrome и Microsoft Edge связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код внутри песочницы через созданную HTML-страницу...
CVE-2025-44090
CVE-2025-44090 affects OhSoft CoffeeZip v4.8.0.0. A crafted archive file, downloaded and executed by a user, allows arbitrary code execution. The CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, no privileges required, but user interaction is required. Impacts on confidentiality, int...
PT-2026-63491
Name of the Vulnerable Software and Affected Versions Franco Corbelli ZPAQFRANZ versions prior to 61.4 Description A flaw allows a remote attacker to escalate privileges and execute arbitrary code by bypassing the Mark-of-the-Web protection mechanism. Mark-of-the-Web is a security feature used by...
PT-2026-63440
Name of the Vulnerable Software and Affected Versions Duplicati version 2.3.0.1 Description Incorrect permission assignments allow authenticated users to have MODIFY permissions that propagate to all subdirectories. When the software is installed outside the default Program Files directory or on ...
PT-2026-63489
Name of the Vulnerable Software and Affected Versions Milos Paripovic OneCommander version 3.96.0.0 Description A flaw in the OneCommander.exe component allows a remote attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that contains a...