Lucene search
+L

2660 matches found

BDU FSTEC
BDU FSTEC
added 2026/09/07 12:00 a.m.3 views

The vulnerability of the dependency manager for PHP Composer, related to the failure to remove special elements, allows a perpetrator to execute arbitrary commands.

The vulnerability of the dependency manager for PHP Composer is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

7.6CVSS6.8AI score0.00409EPSS
SaveExploits1References7Affected Software1
Patchstack
Patchstack
added 2026/09/07 12:00 a.m.4 views

WordPress Live Composer – Free WordPress Website Builder plugin <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection vulnerability

Authenticated Contributor+ PHP Object Injection vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Page Builder: Live Composer versions = 2.1.18...

8.8CVSS5.8AI score0.00468EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/05 4:15 p.m.9 views

CVE-2021-38163

CVE-2021-38163 - SAP NetWeaver AS Java Desynchronization Vulnerability Description CVE-2021-38163 is a security vulnerability in SAP NetWeaver Application Server AS Java that allows an authenticated attacker to upload arbitrary files to the server, potentially leading to remote code execution RCE...

9.9CVSS8.1AI score0.36018EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/05 3:43 p.m.8 views

CVE-2025-31324

CVE-2025-31324 Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters CVE-2025-31324 is a critical "Unrestricted File Upload" vulnerability affecting the SAP NetWeaver Application Server AS Java. Specifically, it resides within the Visual Composer component VCFRAMEWORK. The flaw allows a...

10CVSS8.2AI score0.99512EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/05 1:53 p.m.8 views

SAP-CVE-2025-31324

SAP-CVE-2025-31324 概念実証 SAP NetWeaver Visual Composer における認証を必要としない重大なファイルアップロード脆弱性を検出および悪用するためのツールです。 説明 SAP NetWeaver Visual Composer には Metadata Uploader と呼ばれるコンポーネントが含まれており、適切な認可チェックが欠如しているため、認証されていない攻撃者が任意の実行可能ファイル(例:JSP、WAR)をアプリケーションサーバーにアップロードし、リモートコード実行を達成することが可能です。 影響を受ける製品 製品: SAP...

10CVSS8.2AI score0.99512EPSS
SaveExploits19
Fedora
Fedora
added 2026/09/05 1:12 a.m.7 views

[SECURITY] Fedora 44 Update: composer-2.10.3-1.fc44

Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...

7.7CVSS5.3AI score0.00409EPSS
SaveExploits1
Fedora
Fedora
added 2026/09/05 12:53 a.m.8 views

[SECURITY] Fedora 43 Update: composer-2.10.3-1.fc43

Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...

7.7CVSS5.3AI score0.00409EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/09/05 12:00 a.m.7 views

Fedora 44 : composer (2026-5995821369)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5995821369 advisory. Version 2.10.3 - 2026-08-27 Security: Validate package bin paths against path traversal using symlinks GHSA-96h3-5x6v-m776, CVE-2026-59944 Security:...

7.7CVSS5.8AI score0.00409EPSS
SaveExploits1References3
OSV
OSV
added 2026/09/04 10:13 a.m.6 views

RHSA-2026:63134 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

8.2CVSS4.8AI score0.00692EPSS
SaveExploits0References37
OSV
OSV
added 2026/09/04 12:00 a.m.2 views

OPENSUSE-SU-2026:11689-1 php-composer2-2.10.3-2.1 on GA media

These are all security issues fixed in the php-composer2-2.10.3-2.1 package on the GA media of openSUSE Tumbleweed...

7.7CVSS5.8AI score0.00409EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.6 views

Fedora 43 : composer (2026-0425df0537)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0425df0537 advisory. Version 2.10.3 - 2026-08-27 Security: Validate package bin paths against path traversal using symlinks GHSA-96h3-5x6v-m776, CVE-2026-59944 Security:...

7.7CVSS5.8AI score0.00409EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/09/03 11:22 a.m.7 views

EUVD-2026-70405

n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail v1 and Brevo nodes to the mail composer without verifying it is a string. An authenticated user able to run a workflow can supply an expression that resolves to an object carrying a path or href property, causing t...

7.1CVSS5.9AI score0.00235EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/03 11:22 a.m.13 views

CVE-2026-85170

n8n versions before 1.123.73 , 2.35.4 , and 2.36.2 are vulnerable to local file read and SSRF through the Gmail (v1) and Brevo nodes. The root cause is that these nodes pass message content to the mail composer without verifying it is a string. An authenticated user able to run a workflow can sup...

7.1CVSS5.9AI score0.00235EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/03 11:17 a.m.9 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: composer: composer-2.10.3-1.hum1 noarch composer-2.10.3-1.hum1.src src...

7.7CVSS5.9AI score0.00409EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2026/09/03 11:17 a.m.10 views

composer: Composer: Arbitrary code execution via malicious Perforce source URL

A flaw was found in Composer. A malicious dependency package from a custom Composer repository or an untrusted composer.lock file could exploit a vulnerability in how Composer handles Perforce source URLs. By setting source.type to perforce and source.url to an rsh: or jsh: P4PORT value, an...

7.7CVSS6.3AI score0.00409EPSS
SaveExploits1References9
OSV
OSV
added 2026/09/03 10:14 a.m.10 views

RHSA-2026:62803 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

8.1CVSS7AI score0.00798EPSS
SaveExploits0References61
OSV
OSV
added 2026/09/03 10:14 a.m.8 views

RHSA-2026:62753 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

8.1CVSS7AI score0.00798EPSS
SaveExploits0References61
OSV
OSV
added 2026/09/03 10:14 a.m.9 views

RHSA-2026:62754 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

8.1CVSS7AI score0.00798EPSS
SaveExploits0References61
RedHat Linux
RedHat Linux
added 2026/09/03 9:30 a.m.9 views

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.6CVSS6.7AI score0.00692EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2026/09/03 12:02 a.m.11 views

SUSE CVE-2026-84361

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...

7.7CVSS5.8AI score0.00409EPSS
SaveExploits1References3
Rows per page
Query Builder