830480 matches found
Alibaba Cloud Linux 3 : 0266: pcp (ALINUX3-SA-2026:0266)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0266 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-16524: A command injection flaw i...
Security Bulletin: NVIDIA Megatron Bridge - September 2026
NVIDIA has released a software update for NVIDIA® Megatron Bridge. To protect your system, clone or update this software to version 0.5.1 or later from the NVIDIA/Megatron-Bridge GitHub repo. Go to NVIDIA Product Security. Details NVIDIA has released a software update for NVIDIA® Megatron Bridge...
Grav CMS 2.0.7 - RCE
!/usr/bin/env python3 Exploit Title: Grav CMS 2.0.7 - Remote Code Execution Date: 2026-07-27 Exploit Author: zer0dayf Vendor Homepage: https://getgrav.org/ Software Link: https://github.com/getgrav/grav Version: Grav CMS 2.0.7 Tested on: Ubuntu 22.04 / PHP 8.2 CVE : CVE-2026-65008 """...
KLA91254 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...
KLA91255 Multiple vulnerabilities in Mozilla Thunderbird ESR
Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of service...
EasyAppointments 1.5.1 Blind SQL Injection
A blind SQL injection vulnerability exists in the orderby parameter of the /index.php/customers/search endpoint in EasyAppointments versions 1.5.1 and below. The parameter is passed unsanitized to CodeIgniter 3 Query Builder orderby. Parenthesized subqueries bypass backtick escaping via CI3's...
ArcadeDB 26.8.0 Path Traversal
ArcadeDB contains a path traversal vulnerability in the create database and drop database server commands. An authenticated root user can supply a crafted database name containing directory traversal sequences to create database files outside the configured database directory or recursively delet...
GhostLock-OPPO-PCKM00
GhostLock — OPPO PCKM00 4.14.180 PoC CVE-2026-43499 GhostLock — استغلال تصعيد صلاحيات محلي LPE من نوع use-after-free في آلية futex الخاصة بأولوية الميراث في نواة لينكس، تم نقله إلى جهاز OPPO PCKM00 OP4A57, SM6150, Android 11, kernel 4.14.180-perf+. إخلاء مسؤولية / 免责声明 هذا المشروع مخصص لأغراض الب...
Browser-Pwning-
Browser-Pwning Une documentation bien structurée pour démarrer avec le pwning de Chrome & le pwning de v8 Structure du document Comment ce document est organisé 1. Motivation 2. Véritable matériel d’étude Motivation Les navigateurs sont l’une des technologies les plus utilisées aujourd’hui. Sur...
HavocPwn
Havoc-PWN مُصادَق سلسلة SSRF-RCE هذه مستوحاة من POC الخاص بـ CVE-2024-41570 SSRF من chebuya و Havoc Auth RCE من IncludeSecurity كلتا الثغرتين مذهلتان ومصممتان بعناية، يرجى تقدير هؤلاء المبدعين على عملهم الشاق! chebuya hyperreality كيف يعمل؟ تعمل ثغرة SSRF عن طريق انتحال تسجيل وكيل demon agent...
poc-container-escape
poccontainerescape Enumeración y explotación de vectores...
CVE-2026-83524
A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgatev1/system/datetime.php of the component System Clock. The manipulation leads to command injection. The attack may be...
CVE-2026-82971
A vulnerability was determined in QVidium Opera11 3.3.2a26-Ax4x-opera11. This affects an unknown part of the file /cgi-bin/nettr.cgi of the component CGI Script. This manipulation of the argument ipaddr causes command injection. The attack may be initiated remotely. The exploit has been publicly...
CVE-2026-83524 RedPort Optimizer wXa-223 System Clock datetime.php exec command injection
A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgatev1/system/datetime.php of the component System Clock. The manipulation leads to command injection. The attack may be...
CVE-2026-83524
A command injection vulnerability affects the System Clock component of RedPort Optimizer wXa-203 , wXa-213 , and wXa-223 (up to version 20260704). The flaw resides in the exec function of /xgatev1/system/datetime.php, allowing a remote attacker with low privileges to inject commands without user...
CVE-2026-83524 RedPort Optimizer wXa-223 System Clock datetime.php exec command injection
A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgatev1/system/datetime.php of the component System Clock. The manipulation leads to command injection. The attack may be...
CVE-2026-82954
A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the file packages/server/src/utils/traefik/application.ts of the component Settings. The manipulation of the argument path results in path traversal. The attack can be launched...
CVE-2026-82957
A vulnerability was found in hyperledger-firefly firefly up to 1.4.0. The impacted element is the function ValidateOptions of the file internal/events/webhooks/webhooks.go of the component Webhook Subscription. Performing a manipulation of the argument url results in server-side request forgery...
CVE-2026-82921
A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function checkimgtype of the file admin/pack.php. Executing a manipulation of the argument packimg can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to th...
CVE-2026-82922
A security vulnerability has been detected in ShopEx ECShop up to 2.5.1. This vulnerability affects the function flowupdatecart of the file /flow.php?step=updatecart. The manipulation of the argument recid leads to sql injection. The attack can be initiated remotely. The exploit has been disclose...