Lucene search
+L

150042 matches found

RedHat Linux
RedHat Linux
added yesterday7 views

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...

8.5CVSS6.2AI score0.00897EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday5 views

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...

8.5CVSS6.2AI score0.00897EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday5 views

HPLIP: HPLIP: Privilege escalation and arbitrary code execution via operating system command injection

A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability may allow a local attacker to achieve escalation of privileges and/or arbitrary code execution through operating system command injection. This could lead to an attacker gaining unauthorized control over the...

8.5CVSS6.2AI score0.00897EPSS
SaveExploits0References5
Cvelist
Cvelist
added yesterday40 views

CVE-2026-18600 GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...

9CVSS
SaveExploits0References5
CVE
CVE
added yesterday9 views

CVE-2026-18600

GL.iNet GL-MT3000 devices (firmware up to 4.4.5) are affected by a vulnerability in the Network Lua RPC Plugin, specifically in network.switch_info/network.switch_status in /usr/lib/oui-httpd/rpc/network. Manipulating the switch argument enables remote command injection. The exploit has been publ...

9CVSS7.1AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added yesterday6 views

CVE-2026-18600

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...

9CVSS7.1AI score
SaveExploits0References5Affected Software1
EUVD
EUVD
added yesterday10 views

EUVD-2026-52265

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

9.3CVSS6AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added yesterday5 views

CVE-2026-18574 Authentication Bypass in Check Point Security Management Server

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

9.3CVSS6AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday5 views

CVE-2026-18574

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

9.3CVSS6AI score
SaveExploits0References2
CVE
CVE
added yesterday65 views

CVE-2026-18574

CVE-2026-18574 describes an authentication bypass in Check Point Security Management Server and Multi-Domain Security Management Server (MDS). Affected component: management services. Root cause: authentication bypass allowing an unauthenticated remote attacker with network access to execute arbi...

9.3CVSS6AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday42 views

CVE-2026-18574 Authentication Bypass in Check Point Security Management Server

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

9.3CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday8 views

EUVD-2026-52264

A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.setconfig of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plugin. This manipulation of the argument recordsize causes command injection. The exploit has been published...

8.6CVSS7AI score
SaveExploits0References5
Cvelist
Cvelist
added yesterday41 views

CVE-2026-18599 GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection

A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.setconfig of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plugin. This manipulation of the argument recordsize causes command injection. The exploit has been published...

8.6CVSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-18599

A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted element is the function logread.setconfig of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plugin. This manipulation of the argument recordsize causes command injection. The exploit has been published...

8.6CVSS7AI score
SaveExploits0References5Affected Software1
CVE
CVE
added yesterday9 views

CVE-2026-18599

GL.iNet GL-MT3000 (up to 4.4.5) is affected by a vulnerability in the Logread Lua RPC Plugin, specifically the logread.set_config function in /usr/lib/oui-httpd/rpc/logread, where manipulation of the record_size argument allows command injection. The flaw, confirmed in the Logread Lua RPC Plugin,...

8.6CVSS7AI score
SaveExploits0References5
CVE
CVE
added yesterday10 views

CVE-2026-18598

Technical details (affected version range, specific vulnerable component behavior, exploit vectors) are not publicly available in the provided documents. Monitor for updates from vendor or security advisories.

9CVSS7.3AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added yesterday5 views

CVE-2026-18598

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.getsystemlog of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC plugin. The manipulation of the argument module results in command injection. The attack can be...

9CVSS7.3AI score
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added yesterday40 views

CVE-2026-18598 GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection

A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected element is the function logread.getsystemlog of the file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC plugin. The manipulation of the argument module results in command injection. The attack can be...

9CVSS
SaveExploits0References5
NVD
NVD
added yesterday6 views

CVE-2026-18590

A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the function setsysadm of the file adm.cgi of the component Admin Password Handler. This manipulation causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly...

6.5CVSS0.01067EPSS
SaveExploits0References7
EUVD
EUVD
added yesterday7 views

EUVD-2026-52223

A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Affected is the function setsysadm of the file adm.cgi of the component Admin Password Handler. This manipulation causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly...

6.5CVSS6.3AI score0.01067EPSS
SaveExploits0References7
Rows per page
Query Builder