CVE-2026-37719

An issue in dormakaba evolo Service all versions allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component...

CVE-2026-37719: Undefined Security Weakness

An issue in dormakaba evolo Service all versions allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component...

PT-2026-106232

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.10.3 langflow-base versions prior to 0.10.3 lfx versions prior to 1.10.3 Description An issue exists in the MCP stdio transport where the software executes commands and arguments provided in an MCP server...

cve-2019-10070-apache-atlas-xss

This repository does not have a README...

CVE-2023-49985

CVE-2023-49985 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "cname" parameter on "newclass" Description : A cross-site scripting XSS vulnerability in the component "newclass" of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts ...

CVE-2025-29093-Arbitrary-File-Upload

CVE-2025-29093-Arbitrary-File-Upload This repository reveals a security vulnerability discovered in Motivian Content Management System v.41.0.0. CVE-2025-29093: Arbitrary File Upload This vulnerability was reported to the vendor in accordance with responsible disclosure practices, and to MITRE,...

CVE-2020-8835

CVE-2020-8835...

CVE-2024-46987

CVE-2024-46987 — Camaleon CMS Arbitrary Path Traversal For authorised security assessments, penetration testing engagements, and educational research only. Overview Field| Detail ---|--- CVE| CVE-2024-46987 Product| Camaleon CMS Versions| = 2.8.0, 2.8.2 also confirmed on 2.9.0 Type| Path Traversa...

Unauthenticated-RCE-FUXA-CVE-2023-33831

Unauthenticated RCE FUXA CVE-2023-33831 The vulnerability affects FUXA's scripting component, due to lack of control or sanitization on inputs that can be controlled by users, thus allowing the use of dangerous methods that can be scaled for remote code execution. The affected route is...

Serious-Sam---CVE-2021-36934-Mitigation-for-Datto-RMM

Overview This is a Datto RMM component to mitigate CVE-2021-36934, aka Serious SAM. It follows the mitigation measures outlined at: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 https://kb.cert.org/vuls/id/506989 USE AT YOUR OWN RISK. EXPECT THIS TO BREAK SOME BACKUPS...

CVE-2023-38646

CVE-2023-38646...

CVE-2007-1567

CVE-2007-1567...

CVE-2024-45352

CVE-2024-45352 vulnerability in Xiaomi CVE-2024-45352...

external_tcpdump_CVE-2018-14469

tcpdump To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the file CONTRIBUTING in the tcpdump source tree root. TCPDUMP 4.x.y Now maintained by "The Tcpdump...

bug-bounty-findings-o-research-disclosures.

bug-bounty-findings-o-research-disclosures. Bug Bounty: CVE-2023-50839 IDOR identified in a third-party support component via 'gau' and 'Nuclei'. Despite perimeter redirects, the outdated software remained exposed. Confirmed through manual header analysis. Severity: 5.3 Medium. Focused on Defense...

CVE-2022-24481

CVE-2022-24481 win1021H219044.1620 win1121H222000.593 Basic Compile Information Windows SDK Version: 10.0 latest installed version Platform Toolset: Visual Studio 2022 v143 C++ Language Standard: Default ISO C++14 Standard...

CVE-2023-41425

RCE for WonderCMS versions v3.2.0 to v3.4.2 WonderCMS versions v3.2.0 to v3.4.2 with XSS vulnerability allow a malicious actor to achieve RCE by uploading a component to the installModule CVE-2023-41425 No need to know the password. Features: Automated exploitation of CVE-2023-41425 Ease of...

CVE-2023-4966

CVE-2023-4966...

CVE-2019-9053

This repository does not have a README...

CVE-2024-33453

CVE-2024-33453 Sensitive Data Exposure via Object Level Access Control in esp-idf Description A Buffer Overflow vulnerability in the esp-idf framework version 5.1, used by some Schoolbox products, allows a remote attacker to obtain sensitive information through improper object-level access contro...