295867 matches found
CVE-2026-48750
A flaw was found in Incus, a container and virtual machine manager. A crafted container image can cause the host to write files to arbitrary locations via a symlink, potentially leading to command execution as root on the host. Mitigation No mitigation is needed as Incus is not shipped in any Red...
CVE-2026-48749
A flaw was found in Incus, a container and virtual machine manager. A crafted container image can use a symlink in the rootfs directory to read or write arbitrary files on the host, potentially leading to command execution. Mitigation No mitigation is needed as Incus is not shipped in any Red Hat...
CVE-2026-77533
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-19042 Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling
A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user...
EUVD-2026-66381
A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user...
CVE-2026-19042 Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling
A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user...
CVE-2026-19042
A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user. The attack is delivered through a specially crafted URL sent via the out-of-session chat feature, requ...
Security update for qemu
This update for qemu fixes the following issue: CVE-2026-3886: QEMU calcimagehostmem Integer Overflow Local Privilege Escalation Vulnerability bsc1268061. Changes for qemu: Bug fixes: target/s390x: Make container ids in SysIB15x 1-based bsc1275490 target/s390x: move @deprecated-props to...
Vulnerabilities in DrayTek VigorSwitch
DrayTek has addressed several vulnerabilities in the VigorSwitch product line. These vulnerabilities primarily involve command injection, buffer overflows, null pointer dereferencing, directory traversal, and insufficient authorization checks in various functions of the DrayTek VigorSwitch device...
Vulnerabilities found in DrayTek VigorAP
DrayTek has addressed several vulnerabilities in the VigorAP product line. These vulnerabilities exist in various functions and components of the DrayTek VigorAP devices, including tr069TestInform, ExportSettings, setLan, setcamset, meshstartspeedtest, InquierTime, apautotest, uploadsettings.cgi,...
EUVD-2026-66378
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-77533
UniFi Protect Application (Ubiquiti) is affected by an Improper Input Validation flaw that enables Command Injection on the host device. An attacker with network access and low privileges can exploit this without user interaction. The CVSS 3.1 score is 9.9 (Critical) , reflecting changed scope wi...
CVE-2026-77533
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
CVE-2026-77533
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
POC-CVE-2025-55182
POC-CVE-2025-55182 credito : https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478 root@kitploit: usage: CVE-2025-55182-Exp.py -h -u URL -l LIST -c COMMAND -i --revshell LHOST LPORT -t THREADS --proxy PROXY --timeout TIMEOUT -v Utilizzo root@kitploit: Single target exploit python3...
CVE-2025-61228
CVE-2025-61228 Avviso Questo problema sembra essere più grave di quanto suggerito dallo sviluppatore, quindi non voglio che questa parte venga dimenticata tra le righe. Lo sviluppatore ha osservato sul suo blog: Questo può accadere solo se un programma in esecuzione sul tuo sistema cerca SuperDup...
CVE-2020-8958
CVE-2020-8958 CVE-2020-8958 : Authentifizierter Remote-Code-Ausführungs-Exploit für NetLink-Router mittels boa-Server. CVSS-Bewertung: 7.2 Verwundbarkeitstypen: OS Command Injection Authentifizierung: Erforderlich Betroffenes Modell: HG323 Beschreibung Die Ressource /boaform/admin/formPing in...
CVE-2022-24990
CVE-2022-24990 CVE-2022-24990 TerraMaster TOS RCE non autenticata tramite istanziazione di oggetti PHP Utilizzo Rilevamento della vulnerabilità. root@kitploit: python CVE-2022-24990.py -u http://127.0.0.1:8080 Carica una webshell PHP. root@kitploit: python CVE-2022-24990.py -a http://127.0.0.1:80...
CVE-2020-10567
POC-CVE-2020-10567 POC RCE - RESPONSIVE filemanager v.9.14.0. non il ramo principale ⚠️ Progetto GitHub : https://github.com/trippo/ResponsiveFilemanager Requisiti: Non è richiesto nulla, questo exploit non è autenticato. L'applicazione Responsive Filemanager è uno strumento di gestione file basat...
ch55x_firmware_extractor
Extrator de firmware CH55x O extrator de firmware CH55x é utilizado para ler o firmware de circuitos integrados CH55x. Não há suporte interno nos dispositivos para ler diretamente o firmware através do bootloader. No entanto, existe uma funcionalidade para verificar o conteúdo do firmware de 8 em...