Lucene search
+L

150065 matches found

Nuclei
Nuclei
added 5 days ago32 views

CentOS Web Panel - OS Command Injection

The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution. id: CVE-2021-31324 info: name: CentOS Web Panel - OS Command Injection author: ritikchaddha severity: critical description: | The unprivileged user portal...

10CVSS7.8AI score0.34062EPSS
SaveExploits1References2
Nuclei
Nuclei
added 5 days ago41 views

FortiWeb - Authentication Bypass

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTT...

9.8CVSS8.2AI score0.91838EPSS
SaveExploits18References4
Nuclei
Nuclei
added 5 days ago102 views

Nagios 5.5.6-5.7.5 - Authenticated Remote Command Injection

Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php. This in turn can lead to remot...

9CVSS7.9AI score0.56384EPSS
SaveExploits6References5
Nuclei
Nuclei
added 5 days ago23 views

WS_FTP Server - Insecure Deserialization

In WSFTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WSFTP Server operating system. id: CVE-2023-40044 info: name: WSFTP Server - Insecure...

10CVSS8.3AI score0.9015EPSS
SaveExploits5References5
Nuclei
Nuclei
added 5 days ago200 views

DCBI-Netlog-LAB v1.0 - Command Injection

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request. id: CVE-2023-26802 info: name: DCBI-Netlog-LAB v1.0 - Command Injection author: pussycat0x...

9.8CVSS8AI score0.4871EPSS
SaveExploits1References1
Nuclei
Nuclei
added 5 days ago82 views

sar2html <=3.2.2 Plot Parameter - Remote Code Execution

sar2html version 3.2.2 and prior contains an OS command injection vulnerability in the plot parameter of index.php. A remote, unauthenticated attacker can append shell metacharacters to the plot parameter and execute arbitrary operating system commands. id: CVE-2025-34030 info: name: sar2html...

10CVSS8AI score0.59649EPSS
SaveExploits1References5
Nuclei
Nuclei
added 5 days ago217 views

Seagate BlackArmor NAS - Command Injection

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php. id: CVE-2014-3206 info: name: Seagate BlackArmor NAS - Command Injection author: gy741...

10CVSS8.3AI score0.51014EPSS
SaveExploits1References3
Nuclei
Nuclei
added 5 days ago100 views

Fortinet FortiWLM Unauthenticated Command Injection Vulnerability

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands Successful exploitation of this vulnerability could allow an attacker to...

9.8CVSS7.9AI score0.18148EPSS
SaveExploits0References2
Nuclei
Nuclei
added 5 days ago19 views

Tenda AC15 AC1900 version 15.03.05.19 - Command Injection

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter. id: CVE-2020-10987 info: name: Tenda AC15 AC1900 version 15.03.05.19 - Command Injection author: pussycat0x severity: critical...

10CVSS8.5AI score0.7981EPSS
SaveExploits2References1
Nuclei
Nuclei
added 5 days ago161 views

Spring Security OAuth2 Remote Command Execution

Spring Security OAuth versions 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5 contain a remote command execution vulnerability. When processing authorization requests using the whitelabel views, the responsetype parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote comma...

8.8CVSS7.9AI score0.79176EPSS
SaveExploits1References5
Nuclei
Nuclei
added 5 days ago514 views

Gogs <0.12.6 - Remote Command Execution

Gogs before 0.12.6 is susceptible to remote command execution via the uploading repository file in GitHub repository gogs/gogs. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id...

9.9CVSS8.1AI score0.65237EPSS
SaveExploits1References5
Nuclei
Nuclei
added 5 days ago158 views

Nortek Linear eMerge E3-Series <0.32-08f - Remote Command Injection

Nortek Linear eMerge E3-Series devices before 0.32-08f are susceptible to remote command injection via ReaderNo. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. NOTE: this...

9.8CVSS7.9AI score0.64589EPSS
SaveExploits3References5
Nuclei
Nuclei
added 5 days ago28 views

DELMIA Apriso - Command Injection

An Improper Control of Generation of Code code injection / file upload → RCE vulnerability affecting DELMIA Apriso Release 2020 → Release 2025. When an authenticated user can upload files and the upload handler fails to canonicalize filenames or enforce storage restrictions, an attacker may place...

8CVSS6.7AI score0.76148EPSS
SaveExploits0References3
Nuclei
Nuclei
added 5 days ago30 views

NUUO NVRmini - Remote Command Execution

NUUO NVRmini is vulnerable to unauthenticated remote command execution through the upgradehandle.php file. The vulnerability allows an attacker to execute arbitrary commands by manipulating the uploaddir parameter. id: CVE-2018-14933 info: name: NUUO NVRmini - Remote Command Execution author:...

10CVSS8.3AI score0.93746EPSS
SaveExploits5References3
Nuclei
Nuclei
added 5 days ago122 views

pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection

pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...

9.8CVSS7.7AI score0.87247EPSS
SaveExploits14References5
NVD
NVD
added 5 days ago10 views

CVE-2026-43830

Full details and mitigation steps are currently restricted and will be published at a later date...

9.8CVSS0.00314EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 5 days ago7 views

CVE-2026-43830

Full details and mitigation steps are currently restricted and will be published at a later date...

5.5AI score0.00314EPSS
SaveExploits0References3
EUVD
EUVD
added 5 days ago9 views

EUVD-2026-51386

Full details and mitigation steps are currently restricted and will be published at a later date...

9.8CVSS5.5AI score0.00314EPSS
SaveExploits0References1
Cvelist
Cvelist
added 5 days ago36 views

CVE-2026-43830 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

0.00314EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago28 views

CVE-2026-43830

CVE-2026-43830 describes a command injection vulnerability in the firmware upgrade file verification process. Exploitation could allow an attacker to execute arbitrary commands during firmware upgrade. Documents provide no vendor/product/version details or remediation steps; no exploit status is ...

9.8CVSS5.8AI score0.00314EPSS
SaveExploits0References1
Rows per page
Query Builder