232314 matches found
CVE-2026-72882
Dokploy: CVE-2026-72882 affects Dokploy 0.28.8 and earlier. An authenticated user who can create or update file mounts can inject shell metacharacters into filePath, causing Dokploy to execute attacker-controlled commands on the configured remote managed server over SSH. In the default deployment...
CVE-2025-13294
Affected software: TBEA TLogger web server (firmware version V2.1.0.0B0.0.0.0). Vulnerability: Unauthenticated SQL injection in multiple HTTP endpoints that incorporate attacker-controlled parameters directly into SQLite queries. Impact: attacker can read, modify, or delete data in CCU.db; high c...
CVE-2025-13293
A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticat...
CVE-2026-72880 Dokploy: Arbitrary File Write + Remote OS Command Injection via `certificatePath`
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the apiCreateCertificate schema in packages/server/src/db/schema/certificate.ts accepts a client-supplied certificatePath, and packages/server/src/services/certificate.ts joins that value to the certificate root withou...
CVE-2021-34512
creationtimestamp| type| source ---|---|--- 2026-08-10 19:06:27+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3msqsald3t72x...
CVE-2026-72870
Dokploy's buildRemoteDocker vulnerability affects Dokploy before 0.29.13. The buildRemoteDocker() function interpolates the application-controlled dockerImage value directly into a docker pull command, enabling an authenticated user with project access to craft a dockerImage via application.updat...
Exploit for CVE-2021-47881
CVE-2021-47881 Local stack-based buffer overflow in dataSIM...
CVE-2026-72865 Dokploy: OS Command Injection via compose `composePath`
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the compose.update operation stores an unvalidated composePath that packages/server/src/utils/builders/compose.ts and packages/server/src/services/compose.ts interpolate into docker compose -f, docker stack deploy -c,...
CVE-2026-12339 Authenticated Arbitrary File Write Vulnerability in multiple devices
A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...
CVE-2026-72733
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the backup.restoreBackupWithLogs tRPC subscription builds database restore shell pipelines from the user-controlled databaseName and backupFile fields without safely separating them from shell syntax...
CVE-2026-72898
creationtimestamp| type| source ---|---|--- 2026-08-10 18:04:27+00:00| seen| https://infosec.exchange/users/wdormann/statuses/117072531713464991 2026-08-10 18:04:38+00:00| seen| https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msqorw2bpc22 2026-08-10 18:56:56+00:00| seen|...
CVE-2026-72740 Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, packages/server/src/utils/providers/git.ts parses the user-controlled customGitUrl with sanitizeRepoPathSSH and interpolates its domain into the ssh-keyscan command from addHostToKnownHostsCommand without shell quoting...
CVE-2026-72737
Dokploy is a free, self-hostable Platform as a Service PaaS. In 0.29.8 and earlier, backup.create, backup.update, and backup.restoreBackupWithLogs in apps/dokploy/server/api/routers/backup.ts accept a client-controlled destinationId and use the referenced destination without verifying that...
CVE-2026-72733
Dokploy (PaaS) shows a critical OS command injection in the backup/restore flow. Prior to 0.29.13, the tRPC backup.restoreBackupWithLogs path builds shell commands by interpolating user-controlled databaseName and backupFile into restore commands and rclone paths, allowing an authenticated user w...
SUSE CVE-2026-48120
Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, autorestore.kak script can be exploited by malicious backup files leading to arbitrary kakoune and shell commands being executed by simply opening a file. Kakoune 2026.05.21 fixes the issue. As a workaround, a...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
No d...
Exploit for Protection Mechanism Failure in Microsoft
cve-id Donate Support the maintenance of this project wit...