CVE-2026-80301

The Avast sandbox on Windows contains an improper isolation vulnerability that allows a local, low-privileged attacker to escape the sandbox environment. While the sandbox virtualizes the file system and registry, it fails to restrict COM interface access to the Task Scheduler service . An attack...

CVE-2026-80302 Avast sandbox escape via arbitrary file write in virtualized environment

Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged attacker executing inside the sandbox to write arbitrary files outside sandbox containment and execute code on the host. The sandbox virtualizes file system operations by intercepting...

CVE-2026-80302

The Avast sandbox file virtualization layer on Windows suffers from insufficient isolation , allowing a local, low-privileged attacker executing inside the sandbox to perform an escape. The root cause is a failure to properly validate write targets in specific edge cases, which allows the attacke...

EUVD-2026-118330

Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged attacker executing inside the sandbox to write arbitrary files outside sandbox containment and execute code on the host. The sandbox virtualizes file system operations by intercepting...

CVE-2026-111573 Privilege escalation via unprotected Windows agent data folder

Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's...

EUVD-2026-118329

Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's...

CVE-2026-111573

Checkmk versions <2.5.0p18 , <2.4.0p39 ,

WonderCMS-CVE-2020-35314

CVE-2020-35314 - Authenticated Remote Code Execution in WonderCMS 3.1.3 This repository was created with the goal of testing Remote Code Execution vulnerability on WonderCMS v3.1.3. This fake plugin includes a backdoor php shell, which is located in the file evil.php. It is recommended avoid usin...

WordPress payever Checkout – Composable Payment Gateway plugin <= 4.8.0 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability

Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Payever - WooCommerce Gateway versions = 4.8.0...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 XSS to RCE, Wonder CMS 3.2.0 = 3.4.2 Usage ➜ CVE-2023-41425 python3 exploit.py Enter target URL RHOST, e.g., http://example.com/loginURL: http://redacted.com/loginURL Enter your local host IP LHOST, e.g., 10.10.14.xxx: xx.xx.xx.xx Enter your local web server port...

CVE-2026-90436

Apache Axis 1.x (versions through 1.4) is vulnerable to unauthenticated remote class instantiation due to the deserialization of an inbound SOAP fault. When a SOAP contains a element, the engine loads the named class and may instantiate it via its String constructor if a element is present. Th...

EUVD-2026-118323

UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before checki...

CVE-2026-90436 Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionName

UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before checki...

CVE-2026-90436 Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionName

UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before checki...

wildfly-ejb: wildfly-iiop-openjdk: EAP IIOP listeners may permit unauthed deserialization

Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to the IIOP port may be able to construct and send malicious objects and achieve deserialization, if the target EJB allows untyped method parameters, and dependi...

org.apache.cxf/cxf: Apache CXF: Remote Code Execution via unsafe deserialization of JMS ObjectMessage

A flaw was found in Apache CXF. The Java Message Service JMS transport component improperly deserializes inbound JMS ObjectMessages without type restrictions. A remote attacker can exploit this by sending a specially crafted message to the service's JMS destination. This vulnerability could lead ...

CVE-2020-14882

CVE-2020-14882 This Python script is designed to exploit a Remote Code Execution vulnerability in Oracle WebLogic Server CVE-2020-14882 to execute commands on a vulnerable target server and capture their output through HTTP requests. It first prompts for a target WebLogic URL and network interfac...

CVE-2026-123783

Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the issafescriptcode AST denylist and import blocked modules such as subprocess...

CVE-2026-123675 OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection

A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function executecode of the file imclient/agents/tools/codeexecutor.py of the component Code Executor Tool. This manipulation of the argument filename/lang causes code injection. T...

EUVD-2026-118307

A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function executecode of the file imclient/agents/tools/codeexecutor.py of the component Code Executor Tool. This manipulation of the argument filename/lang causes code injection. T...