Lucene search
+L

150062 matches found

Nuclei
Nuclei
added 5 days ago23 views

WS_FTP Server - Insecure Deserialization

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WSFTP Server operating system. id: CVE-2023-40044 info: name: WSFTP Server - Insecure...

10CVSS8.3AI score0.9015EPSS
SaveExploits5References5
Nuclei
Nuclei
added 5 days ago200 views

DCBI-Netlog-LAB v1.0 - Command Injection

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request. id: CVE-2023-26802 info: name: DCBI-Netlog-LAB v1.0 - Command Injection author: pussycat0x...

9.8CVSS8AI score0.4871EPSS
SaveExploits1References1
Nuclei
Nuclei
added 5 days ago82 views

sar2html <=3.2.2 Plot Parameter - Remote Code Execution

sar2html version 3.2.2 and prior contains an OS command injection vulnerability in the plot parameter of index.php. A remote, unauthenticated attacker can append shell metacharacters to the plot parameter and execute arbitrary operating system commands. id: CVE-2025-34030 info: name: sar2html...

10CVSS8AI score0.59649EPSS
SaveExploits1References5
Nuclei
Nuclei
added 5 days ago217 views

Seagate BlackArmor NAS - Command Injection

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php. id: CVE-2014-3206 info: name: Seagate BlackArmor NAS - Command Injection author: gy741...

10CVSS8.3AI score0.51014EPSS
SaveExploits1References3
Nuclei
Nuclei
added 5 days ago100 views

Fortinet FortiWLM Unauthenticated Command Injection Vulnerability

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands Successful exploitation of this vulnerability could allow an attacker to...

9.8CVSS7.9AI score0.18148EPSS
SaveExploits0References2
Nuclei
Nuclei
added 5 days ago19 views

Tenda AC15 AC1900 version 15.03.05.19 - Command Injection

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter. id: CVE-2020-10987 info: name: Tenda AC15 AC1900 version 15.03.05.19 - Command Injection author: pussycat0x severity: critical...

10CVSS8.5AI score0.7981EPSS
SaveExploits2References1
Nuclei
Nuclei
added 5 days ago161 views

Spring Security OAuth2 Remote Command Execution

Spring Security OAuth versions 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5 contain a remote command execution vulnerability. When processing authorization requests using the whitelabel views, the responsetype parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote comma...

8.8CVSS7.9AI score0.79176EPSS
SaveExploits1References5
Nuclei
Nuclei
added 5 days ago514 views

Gogs <0.12.6 - Remote Command Execution

Gogs before 0.12.6 is susceptible to remote command execution via the uploading repository file in GitHub repository gogs/gogs. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id...

9.9CVSS8.1AI score0.65237EPSS
SaveExploits1References5
Nuclei
Nuclei
added 5 days ago158 views

Nortek Linear eMerge E3-Series <0.32-08f - Remote Command Injection

Nortek Linear eMerge E3-Series devices before 0.32-08f are susceptible to remote command injection via ReaderNo. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. NOTE: this...

9.8CVSS7.9AI score0.64589EPSS
SaveExploits3References5
Nuclei
Nuclei
added 5 days ago28 views

DELMIA Apriso - Command Injection

An Improper Control of Generation of Code code injection / file upload → RCE vulnerability affecting DELMIA Apriso Release 2020 → Release 2025. When an authenticated user can upload files and the upload handler fails to canonicalize filenames or enforce storage restrictions, an attacker may place...

8CVSS6.7AI score0.76148EPSS
SaveExploits0References3
Nuclei
Nuclei
added 5 days ago30 views

NUUO NVRmini - Remote Command Execution

NUUO NVRmini is vulnerable to unauthenticated remote command execution through the upgradehandle.php file. The vulnerability allows an attacker to execute arbitrary commands by manipulating the uploaddir parameter. id: CVE-2018-14933 info: name: NUUO NVRmini - Remote Command Execution author:...

10CVSS8.3AI score0.93746EPSS
SaveExploits5References3
Nuclei
Nuclei
added 5 days ago122 views

pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection

pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...

9.8CVSS7.7AI score0.87247EPSS
SaveExploits14References5
NVD
NVD
added 5 days ago10 views

CVE-2026-43830

Full details and mitigation steps are currently restricted and will be published at a later date...

9.8CVSS0.00314EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-43830

Full details and mitigation steps are currently restricted and will be published at a later date...

5.5AI score0.00314EPSS
SaveExploits0References3
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-51386

Full details and mitigation steps are currently restricted and will be published at a later date...

9.8CVSS5.5AI score0.00314EPSS
SaveExploits0References1
Cvelist
Cvelist
added 5 days ago36 views

CVE-2026-43830 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

0.00314EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago28 views

CVE-2026-43830

CVE-2026-43830 describes a command injection vulnerability in the firmware upgrade file verification process. Exploitation could allow an attacker to execute arbitrary commands during firmware upgrade. Documents provide no vendor/product/version details or remediation steps; no exploit status is ...

9.8CVSS5.8AI score0.00314EPSS
SaveExploits0References1
Fedora
Fedora
added 5 days ago7 views

[SECURITY] Fedora 43 Update: pack-0.40.8-1.fc43

pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...

9.1CVSS5.9AI score0.00632EPSS
SaveExploits3
EUVD
EUVD
added 5 days ago12 views

EUVD-2026-51326

TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the net.setwan interface. This vulnerability allows attackers to execute arbitrary...

6.2AI score0.0267EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 5 days ago9 views

PT-2026-66875

Name of the Vulnerable Software and Affected Versions TP-Link AXE75 V1 affected versions not specified Description An OS command injection flaw exists in the VPN module. This issue occurs due to improper filtering of special characters, allowing an adjacent, authenticated attacker to execute...

8.5CVSS5.9AI score0.00973EPSS
SaveExploits0References5
Rows per page
Query Builder