CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

274422 matches found

Packet Storm•added 2026/02/10 12:0 a.m.•122 views

📄 yuan1994 tpadmin Shell Upload

yuan1994 tpadmin versions up to 1.3.12 suffers from a remote shell upload vulnerability. tpadmin-CVE-2026-2113-poc A proof-of-concept exploiting a Remote Code Execution with web server privileges via Arbitrary File Upload. Vulnerability Description A critical Remote Code Execution vulnerability...

9.8CVSS5.5AI score0.96268EPSS

Exploits5

Zero Science Lab•added 2026/02/10 12:0 a.m.•136 views

JUNG Smart Panel 5.1 KNX Unauthenticated Absolute File Path Traversal

Summary The JUNG Smart Panel 5.1 KNX is a flush-mounted 5-inch touch-sensitive controller designed for managing smart building automation via the KNX system. It serves as a, intuitive, centralized interface for controlling lighting, shading, heating, and security, utilizing a 640 x 480-pixel colo...

6.9CVSS7.4AI score0.00703EPSS

Exploits2

Packet Storm•added 2026/02/10 12:0 a.m.•141 views

📄 Palo Alto Networks PAN-OS 11.2 PHP Code Injection

Palo Alto Networks PAN-OS version 11.2 proof of concept remote command execution exploit that also leverages an authentication bypass vulnerability. ============================================================================================================================================= | Titl...

9.8CVSS5.9AI score0.99698EPSS

Exploits31

Packet Storm•added 2026/02/10 12:0 a.m.•158 views

📄 jsonpath 1.1.1 Prototype Pollution

Proof of concept exploit for a prototype pollution vulnerability in jsonpath version 1.1.1, where unsafe writes to $.constructor.prototype allows attackers to inject arbitrary properties and functions into Object.prototype. By abusing jsonpath.value, an attacker can globally modify object...

9.8CVSS6AI score0.00332EPSS

Exploits1

Packet Storm•added 2026/02/10 12:0 a.m.•194 views

📄 crypto/x509 TLS Certificate Parsing

This Go program demonstrates a theoretical denial of service risk associated with handling unusually large X.509 certificates in TLS connections. It programmatically generates a self-signed certificate containing a very large number of Subject Alternative Names SANs and configures an HTTP client ...

7.5CVSS5.7AI score0.00451EPSS

Exploits2