718645 matches found
CVE-2019-2107
CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - parece aterrador. Todavía recuerdo Stagefright y las vulnerabilidades/bugs de PNG... Con CVE-2019-2107 el decodificador/códec se ejecuta bajo el usuario mediacodec y con un video adecuadamente "elaborado" con tiles habilitados - pspps-i1tilesenabledflag...
EUVD-2026-94115
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion...
CVE-2026-93675
IBM Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to an arbitrary code execution flaw. The root cause is identified as an expected dependency confusion vulnerability. A remote attacker could exploit this issue to execute code on the target system. No specific exploits or scanner sourc...
struts_rest_rce_fuzz-CVE-2017-9805-
此存储库没有 README。...
CVE-2024-32030-Nuclei-Template
Plantilla Nuclei para CVE-2024-32030 Descripción Este repositorio contiene una plantilla de Nuclei para detectar la vulnerabilidad CVE-2024-32030. Esta vulnerabilidad permite la ejecución remota de código a través de la resolución JNDI de la recopilación de métricas JMX. Detalles de la...
EUVD-2026-94119
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-93674
Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to a critical remote code execution (RCE) flaw (CVE-2026-93674 ). The root cause is the improper neutralization of special elements used in an OS command (CWE-94), which allows a remote attacker to execute arbitrary code. This vulnerabilit...
CVE-2026-97673
The Langflow OSS software versions 1.0.0 through 1.12.2 are affected by CVE-2026-97673 , which allows a remote authenticated attacker to execute arbitrary code due to improper input validation (CWE-693 ). This vulnerability can lead to high impact on confidentiality, integrity, and availability. ...
EUVD-2026-94121
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation...
PT-2026-107405
The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromi...
CVE-2026-106233
Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allo...
CVE-2026-106204
Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed...
CVE-2026-106283
Use after free in Streaming in Google Chrome prior to 155.0.8059.39 al...
CVE-2026-106235
Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 all...
CVE-2025-70518
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...
CVE-2025-70519
The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user supplied data. The lack of sanitization allows for the injection of HTML which can be used to execute malicious JavaScript code on any target browser which renders the device log...
PT-2026-107382
A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...
CVE-2025-70521
The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows any unauthenticated attacker to inject commands and run code in the underlying Android operating system...
Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability
Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...