67541 matches found
CVE-2026-0302
CVE-2026-0302 is currently a reserved candidate with no public technical details available in the provided documents. Monitor for updates once the reserving organization publishes further information.
CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...
CVE-2026-0308
This CVE entry is reserved with no public technical details yet. The affected product, root cause, and impact are not specified in the provided documents. Monitor for updates as details are expected once the vulnerability is publicly announced.
EUVD-2026-75256
A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama...
CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
A stored cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama...
EUVD-2026-75255
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured...
CVE-2026-0309
CVE-2026-0309 is currently a reserved candidate with no publicly available technical details. The vulnerability has not yet been announced. Monitor for updates once the assigning organization publicizes the entry.
EUVD-2026-75253
A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service DoS condition on VM-Series firewalls or execute arbitrary co...
CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing
A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service DoS condition on VM-Series firewalls or execute arbitrary co...
CVE-2026-0310
CVE-2026-0310 is a buffer overflow in the XML processing functionality of Palo Alto Networks PAN-OS , rated CVSS 4.0 9.2 (Critical) . An unauthenticated attacker with network access to the management web or dataplane interface can cause a denial of service on VM-Series firewalls or achieve arbitr...
CVE-2026-22553-InSAT-MasterSCADA-BUK-TS-MMadmServ
InSAT MasterSCADA BUK-TS - 認証不要のRCE CVE-2026-22553 | CVSS 9.8 重大 | エクスプロイト作成者 Mohammed Idrees Banyamer 📝 説明 InSAT MasterSCADA BUK-TS にはMMadmServ Webインターフェースに認証不要のOSコマンドインジェクション の脆弱性があります。この欠陥により、リモート攻撃者は認証なしで完全なリモートコード実行（RCE）を達成できます。 影響を受ける製品 : InSAT MasterSCADA BUK-TS 全バージョン 脆弱性タイプ :...
CVE-2025-0133
CVE-2025-0133 CVE-2025-0133 익스플로잇 CVE-2025-0133은 Palo Alto Networks PAN-OS® 소프트웨어의 GlobalProtect™ 게이트웨이 및 포털 기능에서 발생하는 반사형 크로스 사이트 스크립팅XSS 취약점입니다. Captive Portal에 접근 권한이 있는 인증된 사용자가 특수하게 조작된 링크를 클릭하도록 속임을 당할 수 있으며, 이로 인해 해당 사용자 브라우저의 컨텍스트에서 임의의 JavaScript가 실행됩니다. 이는 세션 하이재킹, 자격 증명 도용 또는 기타 클라이언트 ...
D-Link - Unauthenticated Remote Code Execution
OS command injection vulnerability in soap.cgi soapcgimain in cgibin in D-Link DIR-880L DIR-880LREVAFIRMWAREPATCH1.08B04 and previous versions, DIR-868L DIR868LA1FW112b04 and previous versions, DIR-65L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and...
D-Link DIR820LA1_FW105B03 'ping_addr' - OS Command Injection
OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload with the pingaddr parameter to ping.ccp. id: CVE-2023-25280 info: name: D-Link DIR820LA1FW105B03 'pingaddr' - OS Command Injection author: pussycat0x severity:...
UniFi OS Server - Command Injection
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. id: CVE-2026-34910 info: name: UniFi OS Server - Command Injection author: Kazgangap severity: critical description: | A malicious actor...
cPH2 Charging Station v1.87.0 - OS Command Injection
An OS command injection vulnerability in Hardy Barth cPH2 Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature. id: CVE-2023-46359 info: name: cPH2...
ip-camera-research
IPカメラ調査 - Fullhan FH8626V100 AJL30PG0803 Fullhan FH8626V100 SoC（モデルAJL30PG0803）を搭載した民生用IPカメラに関するセキュリティ調査。未認証のAPIアクセス、平文資格情報の開示、OSコマンドインジェクションによる完全な未認証デバイス乗っ取りを対象とした6件のCVEが割り当てられています。 完全なレポート: Breaking Into My Own IP Camera デバイス概要 フィールド| 値 ---|--- SoC / プラットフォーム| FH8626V100 Fullhan...