11259 matches found
RCE (Remote Code Execution) org.apache.avro:avro Dependency in Bamboo Data Center and Server
This High severity org.apache.avro:avro Dependency vulnerability was introduced in versions 9.2.1, 9.6.0, and 10.0.0-rc3 of Bamboo Data Center and Server. This org.apache.avro:avro Dependency vulnerability, with a CVSS Score of 7.3 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L...
CVE-2024-51774
A flaw was found in qBittorrent's DownloadManager component. This vulnerability allows remote code execution via improper validation of SSL/TLS certificates, enabling attackers to perform man-in-the-middle and RCE attacks...
Exploit for Missing Authentication for Critical Function in Cyberpanel
CVE-2024-51567 Exploit Script CVE-2024-51567 is a Python...
CVE-2024-48359
Qualitor v8.24 was discovered to contain a remote code execution RCE vulnerability via the gridValoresPopHidden parameter...
CVE-2023-52044
Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution RCE as there is no restriction for uploading files with the .php8 extension...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.37 bug fix and security update
Red Hat OpenShift Container Platform release 4.15.37 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
CVE-2024-48359
Qualitor v8.24 contains a remote code execution (RCE) vulnerability via the gridValoresPopHidden parameter. Affected software is Qualitor (v8.24); underlying root cause is not detailed in the provided documents. Impact is high (CVE-2024-48359, CVSS 3.1: 9.8). Remediation/status: PT-Security notes...
CVE-2024-48359
Qualitor v8.24 was discovered to contain a remote code execution RCE vulnerability via the gridValoresPopHidden parameter...
CVE-2024-42835
langflow v1.0.12 was discovered to contain a remote code execution RCE vulnerability via the PythonCodeTool component...
Important: httpd24
Issue Overview: Apache HTTP server 2.4.32 to 2.4.44 modproxyuwsgi info disclosure and possible RCE CVE-2020-11984 Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to...
CVE-2024-48359
Qualitor v8.24 was discovered to contain a remote code execution RCE vulnerability via the gridValoresPopHidden parameter...
CVE-2024-42835
CVE-2024-42835 affects langflow v1.0.12 via the PythonCodeTool component, leading to remote code execution due to insufficient input validation/execution handling. Multiple connected sources (Red Hat, Veracode, OSV, GHSA, CVE listings, PT-Security) confirm an RCE risk through PythonCodeTool, with...
CVE-2023-52044
Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution RCE as there is no restriction for uploading files with the .php8 extension...
CVE-2024-51243
The eladmin v2.7 and before contains a remote code execution RCE vulnerability that can control all application deployment servers of this management system via DeployController.java...
CVE-2024-51243
The vulnerability CVE-2024-51243 affects eladmin v2.7 and earlier. Concretely, an RCE exists that can allow an attacker to control all application deployment servers through DeployController.java. The Red Hat and other adapters corroborate the same root cause. No exploitation details or fix/versi...
CVE-2024-51243
The eladmin v2.7 and before contains a remote code execution RCE vulnerability that can control all application deployment servers of this management system via DeployController.java...
Exploit for OS Command Injection in Cyberpanel
CyberPanel Command Injection Vulnerability - CVE-2024-51378...
CVE-2024-48138
A remote code execution RCE vulnerability in the component /PluXml/core/admin/parametresedittpl.php of PluXml v5.8.16 and lower allows attackers to execute arbitrary code via injecting a crafted payload into a template...
