15207 matches found
CVE-2025-25680
The LSC Smart Connect LSC Indoor PTZ Camera (version 7.6.32 ) is vulnerable to Remote Code Execution (RCE) due to a flaw in the tuya_ipc_direct_connect function of the anyka_ipc process. An attacker can achieve arbitrary code execution during the Wi-Fi configuration process by presenting a specia...
CVE-2025-25680: Improper Control of Generation of Code
LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuyaipcdirectconnect function of the anykaipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera...
CVE-2025-25680
LSC Smart Connect LSC Indoor PTZ Camera 7.6.32 is contains a RCE vulnerability in the tuyaipcdirectconnect function of the anykaipc process. The vulnerability allows arbitrary code execution through the Wi-Fi configuration process when a specially crafted QR code is presented to the camera...
CVE-2025-1497: Improper Control of Generation of Code
A vulnerability, that could result in Remote Code Execution RCE, has been found in PlotAI. Lack of validation of LLM-generated output allows attacker to execute arbitrary Python code. Vendor commented out vulnerable line, further usage of the software requires uncommenting it and thus accepting t...
CVE-2025-27607 Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency
Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...
Linux Distros Unpatched Vulnerability : CVE-2024-48063
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PyTorch =2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed...
Linux Distros Unpatched Vulnerability : CVE-2024-50379
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the...
Lucee RCE/XXE Vulnerability
Impact The Lucee team received a responsible disclosure of a security vulnerability which affects all previous releases of Lucee. After reviewing the report and confirming the vulnerability, the Lucee team then conducted a further security review and found additional vulnerabilities which have be...
CVE-2023-38693 RCE in Lucee REST endpoint
Lucee Server or simply Lucee is a dynamic, Java based, tag and scripting language used for rapid web application development. The Lucee REST endpoint is vulnerable to RCE via an XML XXE attack. This vulnerability is fixed in Lucee 5.4.3.2, 5.3.12.1, 5.3.7.59, 5.3.8.236, and 5.3.9.173...
Malicious code in test-hahahaha-rce (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60b5f6a059fbad46e0862b86aaea8203f5531a5d6691caef7ecdd1602146900 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-38693: Improper Restriction of XML External Entity Reference
Lucee Server or simply Lucee is a dynamic, Java based, tag and scripting language used for rapid web application development. The Lucee REST endpoint is vulnerable to RCE via an XML XXE attack. This vulnerability is fixed in Lucee 5.4.3.2, 5.3.12.1, 5.3.7.59, 5.3.8.236, and 5.3.9.173...
MAL-2025-2975 Malicious code in mirage-rce (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f9ba7e438828f3bcacd252bc54f00732b129fe6fc8f6a9909d964720ac1e6420 Setup.py contains a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-02-mirage-rce Reasons...
CVE-2025-25794: Improper Neutralization of Special Elements used in a Command
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminping.php...
CVE-2025-25796: Improper Neutralization of Special Elements used in a Command
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component admintemplate.php...
CVE-2025-25813: Improper Neutralization of Special Elements used in a Command
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminfiles.php...
CVE-2025-25802: Improper Neutralization of Special Elements used in a Command
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminip.php...
Exploit for CVE-2025-1302
CVE-2025-1302 ★ CVE-2025-1302 JSONPath-plus RCE PoC ★ https...
ai.djl.timeseries:timeseries (>=0.19.0, <=0.36.0), ai.mindconnect:mc-agent-admin-ui-app (>=0.0.2, <=0.4.0) +642 more potentially affected by CVE-2025-1686 via io.pebbletemplates:pebble (>=2.5.0, <=4.1.2)
io.pebbletemplates:pebble MAVEN version =2.5.0, =0.19.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.3, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.3.0, =0.1.5, =0.3.0, =0.1.0, =2.5.0, =2.5.2 and more Source cves: CVE-2025-1686 Source advisory: SNYK:JAVA-IOPEBBLETEMPLATES-8745594...
XWiki 5.3 < 15.10.11, 16.0.0 < 16.4.1 RCE Vulnerability (GHSA-rr6p-3pfg-562j) - Version Check
Xwiki is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...
