GHSA-R6HR-VR92-VV28 PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()

Impact PHPCSUtils versions 1.0.0-alpha1 through 1.2.2 contain an arbitrary code execution vulnerability in PHPCSUtils\AbstractSniffs\AbstractArrayDeclarationSniff::getActualArrayKey. The vulnerable method is reached by any sniff that extends AbstractArrayDeclarationSniff and calls...

PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()

Impact PHPCSUtils versions 1.0.0-alpha1 through 1.2.2 contain an arbitrary code execution vulnerability in PHPCSUtils\AbstractSniffs\AbstractArrayDeclarationSniff::getActualArrayKey. The vulnerable method is reached by any sniff that extends AbstractArrayDeclarationSniff and calls...

CVE-2026-84422 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges...

EUVD-2026-89196

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges...

CVE-2026-84422

IBM Guardium Data Protection 12.2 is vulnerable to an OS Command Injection (CWE-78) within the CLI certificate SMIME recipient deletion functionality. This flaw allows an authenticated privileged CLI user to execute arbitrary commands with root privileges . IBM has released a fix for version 12.2...

CVE-2026-84422 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges...

CVE-2026-84436 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges...

CVE-2026-84436

IBM Guardium Data Protection 12.2 is vulnerable to OS command injection within the certificate export CLI functionality . A privileged authenticated CLI user can exploit this vulnerability to execute arbitrary commands with root privileges . This issue is caused by the improper neutralization of ...

EUVD-2026-89194

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges...

CVE-2026-84436 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges...

langflow-CVE-2026-17633-PoC

CVE-2026-17633 & CVE-2026-17632 — IBM Langflow OSS RCE 교육 목적으로만 사용하십시오. 본인이 소유하거나 명시적인 서면 승인을 받은 시스템에만 사용하십시오. 1. 소개 Langflow란 무엇인가 Langflow는 LLM 기반 애플리케이션과 AI 에이전트 워크플로우를 구축하기 위한 오픈소스 로우코드 플랫폼입니다. 사용자가 컴포넌트 — 모델, 리트리버, 도구, 메모리, 사용자 정의 Python 코드 — 를 연결하여 실행 가능한 플로우로 만들 수 있는 시각적 드래그 앤 드롭 인터페이스를...

EUVD-2026-89192

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...

CVE-2026-84440 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...

CVE-2026-84440

IBM Guardium Data Protection 12.2 is vulnerable to command injection within its SNMP alert notification functionality. An authenticated attacker capable of influencing policy alert text can cause the SNMP alerter service to execute attacker-controlled data as operating system commands. Because th...

CVE-2026-84440 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...

Exploit for CVE-2026-84383

CVE-2026-84383 marker-only Discourse lab An isolated Docker l...

CVE-2014-6271

CVE-2014-6271 Une vulnérabilité connue sous le nom de « ShellShock » existe dans GNU Bash jusqu'à la version 4.3 en raison de la manière dont il traite les chaînes de caractères finales dans les valeurs des variables d'environnement après les définitions de fonctions. Cette vulnérabilité permet à...

CVE-2024-10914__POC

CVE-2024-10914 - Preuve de Concept Exploit pour la vulnérabilité d'injection de commande dans le point de terminaison /cgi-bin/accountmgr.cgi. Cette vulnérabilité permet d'exécuter des commandes arbitraires sur le système affecté via des paramètres non assainis. Description de la vulnérabilité...

CVE-2026-44848-PoC

CVE-2026-44848 — Portainer: отсутствие авторизации в эндпоинтах плагинов Docker → RCE на хосте Proof-of-concept для CVE-2026-44848 , уязвимости отсутствия аутентификации CWE-862 в Portainer, которая позволяет не-администратору с доступом к эндпоинту Docker выполнять привилегированные операции с...

CVE-2017-1000486

CVE-2017-1000486 Эксплойт Proof of Concept для PrimeFaces 5.x EL Injection CVE-2017-1000486, уязвимость RCE, которая может быть использована для удаленного выполнения кода на цели. Описание уязвимости Вы можете найти отличное описание уязвимости в блоге Minded Security. Использование Эксплойт...