Lucene search
+L

506200 matches found

Nuclei
Nuclei
added 2026/08/22 12:19 p.m.123 views

Netsweeper <=6.4.3 - Python Code Injection

Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php with certain Referer headers launches a command line with client-supplied parameters, and allows injection of shell metacharacters. id: CVE-2020-13167 info: name: Netsweeper =6.4.4 to mitiga...

9.8CVSS9.5AI score0.95415EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.483 views

Wing FTP Server <= 7.4.3 - Remote Code Execution

Wing FTP Server versions prior to 7.4.4 are vulnerable to an unauthenticated remote code execution RCE flaw CVE-2025-47812. The vulnerability arises from improper NULL byte handling in the 'username' parameter during login, which allows Lua code injection into session files. These injected sessio...

10CVSS9.7AI score0.95491EPSS
SaveExploits24References2
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.35 views

Citrix NetScaler ADC and NetScaler Gateway - Remote Code Execution

critical unauthenticated remote code execution RCE vulnerability affecting Citrix ADC NetScaler ADC and Citrix Gateway appliances configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server. Exploitation can lead to arbitrary code execution. id: CVE-2023-3519 info...

9.8CVSS9.9AI score0.99749EPSS
SaveExploits16References3
NVD
NVD
added 2026/08/22 6:16 a.m.11 views

CVE-2026-19221

The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

7.2CVSS0.00181EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/22 6:00 a.m.18 views

CVE-2026-19221

CVE-2026-19221 affects the Forminator Forms WordPress plugin in versions before 1.57.0.5 . The vulnerability stems from a network-wide setting (identified in enrichment titles as the Hub Connector API Key ) that is not properly restricted to network administrators. This allows an administrator of...

7.2CVSS6AI score0.00181EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/22 6:00 a.m.11 views

EUVD-2026-64221

The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

6AI score0.00181EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/22 6:00 a.m.27 views

CVE-2026-19221 Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite

The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

0.00181EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/08/22 12:51 a.m.5 views

SUSE CVE-2026-76017

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

8.8CVSS6AI score0.00468EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/08/22 12:51 a.m.4 views

SUSE CVE-2026-76018

Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted file. Chromium security severity: High...

8.8CVSS6AI score0.00422EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/08/22 12:50 a.m.6 views

SUSE CVE-2026-76020

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

7.5CVSS6AI score0.00347EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/08/22 12:50 a.m.7 views

SUSE CVE-2026-76021

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.0049EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/08/22 12:50 a.m.6 views

SUSE CVE-2026-76022

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.1AI score0.00511EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/08/22 12:50 a.m.4 views

SUSE CVE-2026-76023

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00498EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.12 views

PT-2026-79566

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...

8.5CVSS6AI score0.00224EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-76018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege elevation in Import in Google Chrome prior to 151.0.7922.173 allowed a remote attacker leveraging social engineering to potentially execute arbitrary...

8.8CVSS6.2AI score0.00422EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-76020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

7.5CVSS6AI score0.00347EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-76021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

8.8CVSS6AI score0.0049EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2026/08/22 12:00 a.m.5 views

VulnCheck KEV: CVE-2021-27691

Command Injection in Tenda G0 routers with firmware versions v15.11.0.69039CN and v15.11.0.55876CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg request. This...

10CVSS6AI score0.25183EPSS
SaveIn wildExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-68766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and...

8.5CVSS6.3AI score0.00224EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-76022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...

8.8CVSS5.9AI score0.00511EPSS
SaveExploits0References2
Rows per page
Query Builder