3167 matches found
CVE-2024-27130
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ QNAP QTS...
Mezzanine-CMS-6.1.0-XSS
Mezzanine-CMS-6.1.0-XSS CVE-2025-50481 Description A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post. CVE: CVE-2025-50481 Affected version:...
CVE-2024-32370
CVE-2024-32370 Vulnerability Description Issue An issue in HSC Cybersecurity HSC Mailinspector version 5.2.17-3 has been identified, allowing a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component. Vulnerable Component...
CVE-2025-55184-POC-Expolit
🔥 CVE-2025-55184 Advanced Exploitation Tool Professional React Server Components DoS Exploitation Framework "KEEP LEARNING KEEP HACKING" - CyberTechAjju 🚀 Quick Start • 📖 Documentation • 💻 Features • ⚠️ Disclaimer 🎯 About CVE-2025-55184 CVE-2025-55184 is a high-severity Denial of Service DoS...
MOVEit Transfer - SQL Injection
In Progress MOVEit Transfer before 2020.1.11 12.1.11, 2021.0.9 13.0.9, 2021.1.7 13.1.7, 2022.0.7 14.0.7, 2022.1.8 14.1.8, and 2023.0.4 15.0.4, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized...
CVE-2022-38725
CVE-2022-38725 CVE-2022-38725 is an unauthenticated Denial of Service vulnerability in syslog-ng versions prior to 3.38.1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-7932-4fc6-pvmc https://nvd.nist.gov/vuln/detail/CVE-2022-38725 Steps to Reproduce 1. Pull a vulnerable docker...
CVE-2026-88404
A remote code execution RCE vulnerability in the UniscriptExecutionService.execute function /services/script-execution.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...
CVE-2026-88405
A remote code execution RCE vulnerability in the RemoteRegisterFunctionService function /remote/remote-register-function.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...
CVE-2026-88404: Improper Control of Generation of Code
A remote code execution RCE vulnerability in the UniscriptExecutionService.execute function /services/script-execution.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...
CVE-2026-88405
A remote code execution RCE vulnerability in the RemoteRegisterFunctionService function /remote/remote-register-function.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...
CVE-2026-88405: Improper Control of Generation of Code
A remote code execution RCE vulnerability in the RemoteRegisterFunctionService function /remote/remote-register-function.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...
CVE-2026-88405
A remote code execution RCE vulnerability in the RemoteRegisterFunctionService function /remote/remote-register-function.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...
CVE-2026-88404
A remote code execution RCE vulnerability in the UniscriptExecutionService.execute function /services/script-execution.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...
CVE-2026-88404
A remote code execution RCE vulnerability in the UniscriptExecutionService.execute function /services/script-execution.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...
PT-2026-96289
A remote code execution RCE vulnerability in the UniscriptExecutionService.execute function /services/script-execution.service.ts of Univer v1.0.0-alpha.2 allows attackers to execute arbitrary code via a crafted payload...
CVE-2026-88404
The Univer v1.0.0-alpha.2 software contains a remote code execution (RCE) vulnerability within the UniscriptExecutionService.execute() function located in /services/script-execution.service.ts. This flaw allows an attacker to execute arbitrary code by sending a crafted payload . While the SSSV me...
Astra Linux – Vulnerability in ruby-redcloth
A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of the redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS by providing a crafted payload...
Astra Linux – Vulnerability in pyxdg
A code injection issue was discovered in PyXDG before version 0.26, through crafted Python code within a Category element of a Menu XML document in a .menu file. The XDGCONFIGDIRS setting must be configured to trigger the xdg.Menu.parse parsing within the directory containing this file. This issu...
GHSA-39MM-RWM3-29JP silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
Impact The advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported by Steve Boyd Silverstripe Ltd...