Lucene search
+L

45917 matches found

Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.16 views

PT-2026-24723

Name of the Vulnerable Software and Affected Versions Lantronix EDS5000 version 2.1.0.0R3 Description The HTTP RPC module in Lantronix EDS5000 series devices contains a code injection flaw. When user authentication fails, the module executes a shell command to write logs, directly concatenating t...

9.8CVSS7AI score0.13549EPSS
SaveExploits1References40
Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.9 views

PT-2026-24747

Name of the Vulnerable Software and Affected Versions Cursor versions prior to 2.0 Description Cursor is a code editor designed for programming with AI. Prior to version 2.0, if a visited website contained maliciously crafted instructions, the model could attempt to follow them to assist the user...

8.8CVSS5.4AI score0.00276EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.22 views

Epross AVCON6 安全漏洞

Epross AVCON6 is a monitoring video management server developed by Epross Corporation. Epross AVCON6 has a security vulnerability, which stems from OGNL injection. This vulnerability could allow unverified attackers to execute arbitrary commands...

9.8CVSS6.1AI score0.00394EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.17 views

Lantronix EDS3000PS 安全漏洞

Lantronix EDS3000PS is a serial port device server developed by the American company Lantronix. The Lantronix EDS3000PS version 3.1.0.0R2 contains a security vulnerability. This vulnerability stems from improper handling of the TFTP client host parameters on the Filesystem Browser page, which cou...

9.8CVSS6.7AI score0.00331EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.27 views

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant. Versions of OpenClaw prior to 2026.2.21 had security vulnerabilities. These vulnerabilities stemmed from command injection issues during the generation of systemd unit files, which could allow attackers to execute arbitrary commands...

7.8CVSS6.1AI score0.01075EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.14 views

Cisco IOS XR 操作系统命令注入漏洞

Cisco IOS XR is an operating system developed by the American company Cisco for its network devices. Cisco IOS XR has a vulnerability related to operating system command injection, which stems from insufficient validation of user parameters in certain CLI commands. This vulnerability may lead to...

8.8CVSS7AI score0.00172EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.7 views

PT-2026-24781

SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the formSysCmd endpoint. Attackers can send POST requests with the sysCmd parameter containing shell commands to...

9.8CVSS6.3AI score0.07899EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.13 views

NetGain EM Plus 安全漏洞

NetGain EM Plus is a network and system management software developed by NetGain Company in Singapore. Version 10.1.68 of NetGain EM Plus contains a security vulnerability. This vulnerability stems from the parameter handling in the scripttest.jsp endpoint, which may allow unverified attackers to...

9.8CVSS6.1AI score0.00756EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.17 views

SAPIDO RB-1732 安全漏洞

SAPIDO RB-1732 is a wireless router produced by SAPIDO Company in Taiwan, China. The SAPIDO RB-1732 V2.0.43 version has a security vulnerability. This vulnerability stems from the formSysCmd endpoint, which allows remote command execution, potentially enabling unverified attackers to execute...

9.8CVSS6.1AI score0.07899EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.22 views

PT-2026-24788

Epross AVCON6 systems management platform contains an object-graph navigation language OGNL injection vulnerability that allows unauthenticated attackers to execute arbitrary commands by injecting malicious OGNL expressions. Attackers can send crafted requests to the login.action endpoint with OG...

9.8CVSS6AI score0.00394EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.11 views

Micro Research MR-GM5L-S1和Micro Research MR-GM5A-L1 代码注入漏洞

Both Micro Research MR-GM5L-S1 and Micro Research MR-GM5A-L1 are embedded industrial communication module devices produced by the Canadian company Micro Research. Both devices have code injection vulnerabilities; these vulnerabilities stem from code injection issues that may allow for the executi...

8.6CVSS7.4AI score0.00567EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.21 views

PT-2026-24769

FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php endpoint. Attackers can upload ZIP files containing PHP shells, use the unzip functionality to extract them into accessible directories, an...

9.8CVSS6AI score0.00903EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/03/11 12:0 a.m.3 views

CVE-2025-67041

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the original command and execute an arbitrary one with root privileges...

5.9AI score0.00331EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.13 views

Lantronix EDS5000 安全漏洞

The Lantronix EDS5000 is a serial port device server developed by the American company Lantronix. The Lantronix EDS5000 2.1.0.0R3 version contains a security vulnerability. This vulnerability stems from improper handling of the parameter for the Log Info page file name. It could allow authenticat...

8.8CVSS6.8AI score0.00302EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.15 views

Lantronix EDS5000 安全漏洞

The Lantronix EDS5000 is a serial port device server developed by the American company Lantronix. The Lantronix EDS5000 2.1.0.0R3 version contains a security vulnerability. This vulnerability stems from the HTTP RPC module directly concatenating commands into the username parameter without proper...

9.8CVSS6.8AI score0.13549EPSS
SaveExploits1References3
Snyk
Snyk
added 2026/03/10 6:38 p.m.5 views

Improper Handling of Case Sensitivity

Overview org.webjars.npm:simple-git is an A light weight interface for running git commands in any node.js application. Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity in the preventProtocolOverride function, which fails to properly validate...

9.8CVSS6.2AI score0.02784EPSS
SaveExploits2References3
Snyk
Snyk
added 2026/03/10 6:38 p.m.8 views

Improper Handling of Case Sensitivity

Overview simple-git is a light weight interface for running git commands in any node.js application. Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity in the preventProtocolOverride function, which fails to properly validate case-insensitive configuration...

9.8CVSS7.7AI score0.02784EPSS
SaveExploits2References3
EUVD
EUVD
added 2026/03/10 6:31 p.m.9 views

EUVD-2026-10515

An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...

5.3CVSS5.9AI score0.00147EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.7 views

EUVD-2025-208493

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is...

8.1CVSS5.9AI score0.0087EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.8 views

EUVD-2025-208494

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is...

8.1CVSS5.9AI score0.0087EPSS
SaveExploits0References2
Rows per page
Query Builder