232428 matches found
Exploit for Code Injection in Vmware Spring_Cloud_Function
No d...
Exploit for CVE-2026-0740
No d...
gha-oidc-auditor
gha-oidc-auditor !Licensehttps://img.shields.io/badge/lic...
PT-2026-79532
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-823DRU version 1.1.02b01 Description A weakness in the CLI Configuration Tool allows for remote command injection. This issue occurs within the nvram get function, where improper manipulation can lead to the execution of arbitrary...
PT-2026-79528
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 2.2.01b05 Description A remote command injection issue exists within the ssi component. By manipulating the filename argument in the '/cgi-bin/upload.cgi' endpoint, an attacker can execute arbitrary commands on the...
VulnCheck KEV: CVE-2025-10164
A security flaw has been discovered in lmsys sglang 0.4.6. Affected by this vulnerability is the function main of the file /updateweightsfromtensor. The manipulation of the argument serializednamedtensors results in deserialization. The attack can be launched remotely. The exploit has been releas...
PT-2026-79742
Name of the Vulnerable Software and Affected Versions Comfast CF-N1-S version 2.6.0.1 Description A stack-based buffer overflow exists in the Web Management component. The issue occurs when the device processes input for NTP timezone settings via the /cgi-bin/mbox-config?method=SET§ion=ntp...
Exploit for CVE-2026-64638
Cve-2...
CVE-2026-77683
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET§ion=ntptimezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit ha...
CVE-2026-77686 Dolibarr Account card.php improper authorization
A weakness has been identified in Dolibarr up to 23.0.4. This affects an unknown part of the file htdocs/user/card.php of the component Account Handler. This manipulation of the argument ID causes improper authorization. The attack may be initiated remotely. The exploit has been made available to...
CVE-2026-77681
A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...
CVE-2026-77683 Comfast CF-N1-S mbox-config system command injection
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET§ion=ntptimezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit ha...
CVE-2026-77683
Comfast CF-N1-S firmware 2.6.0.1 is affected by a command injection vulnerability in the system function of the CGI endpoint /cgi-bin/mbox-config?method=SET§ion=ntp_timezone. Manipulation of the timestr argument allows an authenticated remote attacker to inject and execute arbitrary system co...
CVE-2026-77683 Comfast CF-N1-S mbox-config system command injection
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET§ion=ntptimezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit ha...
EUVD-2026-63884
A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET§ion=ntptimezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit ha...
PoC-Exploit
pocs Proof-of-concept exploits for vulnerabilities discovered...
CVE-2026-77681 CodeAstro Online Job Portal update-profile.php unrestricted upload
A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...
CVE-2026-77681 CodeAstro Online Job Portal update-profile.php unrestricted upload
A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly...