EUVD-2026-108336

CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2 in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-byte stack buffer and the caller's string...

CVE-2026-115504 CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c

CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2 in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can supply a crafted FITS file that overflows a fixed 28,800-byte stack buffer and the caller's string...

CVE-2025-55182_liyon

CVE-2025-55182 - React Server Components RCE ⚠️ Legal Notice : This tool is intended solely for security research, authorized penetration testing, and educational purposes. Using this tool against any system without explicit permission is illegal and unethical. 📋 Overview CVE-2025-55182 is a...

CVE-2026-114650 Plaintext exposure of encrypted fields via ANSI code-page corruption of database name

A flaw in the client-side encryption support of the MongoDB .NET/C driver can cause data designated for client-side field-level encryption to be written without encryption. Under certain platform text-encoding configurations, an internal name conversion loses information, so the encryption layer...

CVE-2025-69604

CVE-2025-69604 Description This vulnerability is similar to the one that is described in CVE-2025-61229 – an attacker can edit the task template to get SuperDuper backup tasks to install an arbitrary package. The package can then run shell scripts as the root user and with the highest level of...

CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC

CVE-2020-29607 — Pluck CMS Authenticated remote code execution in Pluck CMS before 4.7.13. The admin file manager admin.php?action=files does not validate file extensions, allowing upload of .phar files which Apache executes as PHP. Uploading a webshell through this endpoint results in RCE as the...

poc-cve-2025-69219

CVE-2025-69219 apache airflow unsafe deserialization to RCE 1. copy poc.py to your Airflow dags directory. 2. trigger the poc workflow from the UI. 3. check task logs for execution output...

CVE-2018-16763-Fuel-CMS-1.4.1-Remote-Code-Execution-PoC

CVE-2018-16763 — Fuel CMS 1.4.1 Remote Code Execution PoC Unauthenticated RCE vulnerability in Fuel CMS 1.4.1. The filter parameter in the /fuel/pages/select/ endpoint is passed unsanitized to a eval call in the PHP backend, allowing arbitrary code execution via a crafted payload. Unlike blind...

CVE-2026-25769

🚨 CVE-2026-25769 - Wazuh Insecure Deserialization RCE Critical Worker ➜ Master Remote Code Execution in Wazuh Cluster Mode Unsafe deserialization in Wazuh cluster communications allows a compromised worker node to achieve root RCE on the master node. 📌 Overview CVE ID: CVE-2026-25769 Product: Waz...

CVE-2026-95717

The provided documents identify CVE-2026-95717 as an Authenticated Stored Cross-Site Scripting (XSS) vulnerability located within the AOS Web-Based Management Interface . While the title specifies the vulnerability type and the affected component, the provided documentation does not include speci...

CVE-2026-95714

A vulnerability exists in AOS-10 where an authenticated adjacent buffer overflow can lead to Remote Code Execution . While the provided documents do not specify the exact component or version affected, the impact is significant as it allows for remote code execution. No specific remediation, expl...

CVE-2026-95714 Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10

A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-95711 Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Interface

An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are...

CVE-2026-95707 Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8

A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-95707

CVE-2026-95707 identifies an authenticated buffer overflow vulnerability within AOS-8 . This flaw can lead to Remote Code Execution (RCE) . While specific technical root causes and affected versions are not detailed in the provided documents, the vulnerability carries a HIGH severity rating with ...

CVE-2026-95704

Technical details for CVE-2026-95704 are not publicly available in the provided documents. While the title suggests an Authenticated Remote Code Execution vulnerability in a Wireless Network Management Interface allowing unauthorized system control, the provided documentation contains no specific...

CVE-2026-95704 Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface

A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially...

CVE-2026-79892 Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8

A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-79892

A memory corruption vulnerability exists in AOS-8 that can be triggered via an authenticated local attack. Successful exploitation could lead to arbitrary code execution . While the impact is high, specific technical details regarding the root cause, affected components, or remediation steps are ...

CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC

CVE-2024-25600 — WordPress Bricks Builder RCE PoC Unauthenticated remote code execution vulnerability in WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data References CVE-2024-25600 Bricks Builder Security Advisory Wordfence writeup Credits Discovery: Snicco / Calvin Alka...