523155 matches found
EUVD-2026-78943
An issue in MitraStar GPT-2742GX4X5v6-SV GLg2.5100XNT0b233 allows an authenticated attacker to execute arbitrary code via the /cgi-bin/device-management-utilities-internet.cgi component...
MiracleLinux 9 : redis-6.2.24-1.el9_8 (AXSA:2026-1829:03)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1829:03 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data...
nginx:1.24 security update
1.24.0-7.5.0.1 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.24.0-7.5 - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 1:1.24.0-7.4 - Resolves: RHEL-219310 - nginx:...
nginx security update
1.26.3-6.0.1.el102.7 - Reference oracle-indexhtml within Requires Orabug: 33802044 2:1.26.3-6.7 - Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 2:1.26.3-6.6 - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer over-read allows memory...
RockyLinux 9 : postgresql:16 (RLSA-2026:67491)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67491 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitra...
EUVD-2026-78626
An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary code via the FlwTaskController.java component, and the FlwTaskServiceImpl.completeTask, CompleteExecuteComponent.process, Warm-Flow TaskService.skip, POST /workflow/task/completeTask components...
CVE-2026-88616
CVE-2026-88616 affects RuoYi-Vue-Plus 6.0.0 , a Java-based enterprise management framework. The vulnerability allows a remote authenticated attacker to execute arbitrary code through the FlwTaskController.java component, specifically via FlwTaskServiceImpl.completeTask , CompleteExecuteComponent....
CVE-2026-51133
CVE-2026-51133 is a Cross-Site Scripting (XSS) vulnerability in za-internet GmbH C-MOR Video Surveillance versions 6.0104 and below . A remote attacker can execute arbitrary client-side code by crafting malicious URLs targeting the size parameter in the ptzpreset.pml component and the anyparam pa...
PT-2026-93134
Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-93128
Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-78814
1024-lab SmartAdmin v3.30.0 contains a stored cross-site scripting vulnerability in its file upload functionality. This allows a remote attacker to execute arbitrary code...
PT-2026-93167
Another CVE from Google Chrome! 🚀 CVE-2026-91749 - Critical Glad to contribute another security finding to Chrome and grateful to the Chrome Security Team for the collaboration. CVE GoogleChrome CyberSecurity BugBounty SecurityResearch https://t.co/MPOTVjkcT8...
MiracleLinux 8 : httpd:2.4 (AXSA:2026-1840:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1840:01 advisory. httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 Tenable has...
Linux Distros Unpatched Vulnerability : CVE-2026-91957
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.31.0 contains a use-after-free vulnerability in the smartcard RDPDR device handler when worker thread creation fails after device registration...
AlmaLinux 10 : nginx (ALSA-2026:67314)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67314 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the AlmaLinux...
Linux Distros Unpatched Vulnerability : CVE-2026-92248
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer...
Oracle Linux 10 : ELSA-2026-67314-0: / nginx (ELSA-2026-673140)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-673140 advisory. - Resolves: RHEL-212454 - nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 - Resolves: RHEL-219313 - nginx: NGINX: Heap buffer...
ROS-20260915-73-0147
The vulnerability of the epremove function in Linux operating system kernels relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2025-24893
XWiki CVE-2025-24893 概念実証 著者 : Net.Doge & Infinit3i このPythonスクリプトは、CVE-2025-24893 を悪用します。これは、非同期にレンダリングされるGroovyマクロの不適切なサンドボックス化に起因する XWiki のリモートコード実行（RCE）脆弱性です。RSSベースのSolrSearchエンドポイントへのインジェクションを通じて、任意のコマンド実行を可能にします。 📌 機能 Groovyインジェクションによる単一コマンド実行 リバースシェルペイロードの自動生成（msfvenom を使用） カスタマイズオプション:...