Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/20 6:17 p.m.•8 views

CVE-2026-113506

A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class/public/common.py of the component File Manager. The manipulation of the argument sfile/dfile/access/user leads to os command injection. The attack is possible to be carried out...

9.9CVSS0.02077EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/20 5:15 p.m.•7 views

CVE-2026-113506

The aaPanel software (up to version 8.25.0 ) is vulnerable to an OS command injection flaw within the File Manager component. The issue resides in the ExecShell function of the class/public/common.py file, where the lack of proper sanitization of the sfile/dfile/access/user arguments allows for r...

9.9CVSS8.3AI score0.02077EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/20 5:15 p.m.•6 views

EUVD-2026-105212

A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class/public/common.py of the component File Manager. The manipulation of the argument sfile/dfile/access/user leads to os command injection. The attack is possible to be carried out...

9.9CVSS8.4AI score0.02077EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/20 5:15 p.m.•18 views

CVE-2026-113506 aaPanel File Manager common.py ExecShell os command injection

A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class/public/common.py of the component File Manager. The manipulation of the argument sfile/dfile/access/user leads to os command injection. The attack is possible to be carried out...

9.9CVSS0.02077EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•5 views

PT-2026-118507

Name of the Vulnerable Software and Affected Versions aaPanel versions prior to 8.25.0 Description An OS command injection issue exists in the File Manager component. The ExecShell function within the class/public/common.py file is susceptible to manipulation via the sfile, dfile, access, and use...

9.9CVSS9AI score0.02077EPSS
SaveExploits0References7
Packet Storm
Packet Storm
•added 2010/06/25 12:00 a.m.•18 views

Norex 1.3.2.0 Heap Overflow

Exploit Title: Norex Argument Heap-Overflow Date: 06.22.2010 Author: SiktirEdenzi aka GoteGELENZI Software Link: http://www.muratkaslioglu.com/norex/ Version: v1.3.2.0 Tested on: Linux CVE : Code : define PATHZEN "/usr/bin/natalex -r" define OFFERSIZE 1024 define DEFAULTOFFSET 50 ulong getesp...

0.7AI score
SaveExploits0
Rows per page
Query Builder