Lucene search
+L

505978 matches found

NVD
NVD
added 2026/08/24 4:16 a.m.5 views

CVE-2026-78211

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 3:32 a.m.4 views

EUVD-2026-64706

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.3CVSS5.8AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/24 3:32 a.m.10 views

CVE-2026-78211 4MOSAn Security Technology|4MOSAn GCB Doctor - OS Command Injection

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/08/23 11:43 p.m.32 views

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

8.5CVSS6.1AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/23 11:43 p.m.33 views

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.4CVSS6AI score0.00456EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/08/23 11:43 p.m.59 views

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7AI score0.00412EPSS
SaveExploits0References11Affected Software9
BDU FSTEC
BDU FSTEC
added 2026/08/23 11:42 p.m.30 views

The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

7.5CVSS6AI score0.06835EPSS
SaveExploits9References3Affected Software1
GithubExploit
GithubExploit
added 2026/08/23 5:04 p.m.24 views

solutions

Exploitmatic solutions !License: Apache 2.0https://img.sh...

10CVSS6.5AI score0.99999EPSS
SaveExploits381
CVE
CVE
added 2026/08/23 9:27 a.m.32 views

CVE-2026-10053

GitLab CE/EE is affected by a path traversal vulnerability in the package registry component that could allow an authenticated user (low privileges) to achieve remote code execution . The vulnerability affects versions 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2. The CVSS 3.1 s...

8.5CVSS6.4AI score0.00715EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/08/23 9:27 a.m.9 views

EUVD-2026-64645

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package...

8.5CVSS6.4AI score0.00715EPSS
SaveExploits1References2
OSV
OSV
added 2026/08/23 8:34 a.m.10 views

ROOT-OS-DEBIAN-11-CVE-2026-73076 CVE-2026-73076 in vim - Patched by Root

Root has patched CVE-2026-73076 in the vim package for Root:Debian:11. Multiple fixed versions available...

8.4CVSS5.3AI score0.00131EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.108 views

Cockpit Web Console < 360 - Remote Code Execution

Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH...

9.8CVSS6.8AI score0.1548EPSS
SaveExploits4References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.113 views

PrestaShop Responsive Mega Menu Module - Remote Code Execution

The 'Responsive Mega Menu' module for PrestaShop is prone to a remote code execution and SQL injection vulnerability. modules/bamegamenu/ajaxphpcode.php in the Responsive Mega Menu Horizontal+Vertical+Dropdown Pro module 1.0.32 for PrestaShop allows remote attackers to execute an SQL injection or...

9.8CVSS9.9AI score0.27382EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.34 views

LaRecipe < 2.8.1 Remote Code Execution via SSTI

LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection SSTI, which could potentially lead to Remote Code Execution RCE in vulnerable configurations. id: CVE-2025-53833 info:...

10CVSS5.6AI score0.09418EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.48 views

HPE System Management - Cross-Site Scripting

HPE System Management contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

5.4CVSS6.1AI score0.044EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.91 views

TerraMaster TOS <.1.29 - Remote Code Execution

TerraMaster TOS before 4.1.29 has invalid parameter checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with for example OS commands in the opt parameter. id:...

10CVSS8.7AI score0.28984EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.28 views

WordPress Contact Form by Supsystic - Server-Side Template Injection

Contact Form by Supsystic WordPress plugin = 1.7.36 contains a server-side template injection caused by unsandboxed TwigLoaderString and cfsPreFill functionality, letting unauthenticated attackers execute arbitrary code remotely via GET parameters. id: CVE-2026-4257 info: name: WordPress Contact...

9.8CVSS5.7AI score0.41475EPSS
SaveExploits9References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.189 views

Jolokia Agent - JNDI Code Injection

Jolokia agent is vulnerable to a JNDI injection vulnerability that allows a remote attacker to run arbitrary Java code on the server when the agent is in proxy mode. id: CVE-2018-1000130 info: name: Jolokia Agent - JNDI Code Injection author: milo2012 severity: high description: | Jolokia agent i...

8.1CVSS8.2AI score0.46798EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.20 views

DataEase 2.10.4-2.10.7 - Remote Code Execution

DataEase prior to version 2.10.8 contains a remote code execution caused by insecure backend JDBC link handling, letting authenticated users execute arbitrary code, exploit requires user authentication. id: CVE-2025-32966 info: name: DataEase 2.10.4-2.10.7 - Remote Code Execution author: ChrisJr4...

9.8CVSS6.5AI score0.04396EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/23 2:28 a.m.117 views

XWiki Platform - Remote Code Execution

Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity, and availability of the whole XWiki installation. This vulnerability has been patched in XWiki 15.10.11, 16.4.1, and 16.5.0RC1. id: CVE-2025-24893 info: name: XWiki...

9.8CVSS9.2AI score0.99864EPSS
SaveExploits52References2
Rows per page
Query Builder