The vulnerability of the wsrep_notify_cmd() function in the MariaDB database management system allows a hacker to execute arbitrary commands.

The vulnerability of the wsrepnotifyCmd function in the MariaDB database management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the _libssh2_packet_add() function in the src/packet.c component of the SSH2 implementation library Libssh2 allows a attacker to cause a service failure.

The vulnerability of the libssh2packetadd function in the src/packet.c component of the SSH2 protocol implementation library Libssh2 involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Shell command shell in Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Shell command shell in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the State Snapshot Transfer (SST) mechanism of the MariaDB database management system allows attackers to execute arbitrary commands.

The vulnerability of the State Snapshot Transfer SST mechanism of the MariaDB database management system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ROS-20260921-73-0041

The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ROS-20260921-73-0131

The vulnerability in Golang is related to algorithmic complexity. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260921-73-0128

The vulnerability in Golang is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2002-0346

CVE-2002-0346 Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to 1 service.cgi or 2 alert.cgi. Packetstorm publication at https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html...

CVE-2018-10933

POC de CVE-2018-10933 Se encontró una vulnerabilidad en la máquina de estados del lado del servidor de libssh antes de las versiones 0.7.6 y 0.8.4. Un cliente malicioso podría crear canales sin realizar primero la autenticación, lo que resulta en un acceso no autorizado. Uso : root@kitploit:...

CVE-2023-43147

CVE-2023-43147 Vendedor: PHPJabbers Página web del vendedor: https://www.phpjabbers.com/ Enlace del software: https://www.phpjabbers.com/limo-booking-software Versión: 1.0 Probado en: Windows 10 Pro Impacto: Agregar un usuario atacante con privilegios de administrador CVE: La vulnerabilidad de...

CVE-2024-50968

CVE-2024-50968 Description A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker...

CVE-2020-18325

Existe una vulnerabilidad de Cross Site Scripting XSS múltiple en Intelliants Subrion CMS v4.2.1 en el panel de Configuración. Descripción Subrion CMS es fácil de instalar y sencillo de administrar. Úselo como aplicación independiente o junto con otras aplicaciones para crear sitios de nivel...

CVE-2015-5531-POC

CVE-2015-5531-POC Contexto de la vulnerabilidad Elasticsearch es un motor de búsqueda RESTful distribuido y de código abierto basado en Lucene, desarrollado por la empresa neerlandesa Elasticsearch. Se utiliza principalmente en entornos de computación en la nube y permite indexar datos mediante...

CVE-2026-45140

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-45140 CVE-2026-45140 Chamilo LMS 2.0.0 — chamilo Chamilo LMS es un sistema de gestión del aprendizaje de código abierto. Antes de la versión 2.0.1, Chamilo LMS permite a un atacante remoto no autenticado ejecutar código arbitrario en...

The vulnerability of the NPM packet manager’s vm2 library, related to improper code generation management, allows an attacker to execute arbitrary code.

The vulnerability of the NPM package manager’s vm2 library is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-84081

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation...

CVE-2026-84077

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability...

CVE-2026-82892

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-75878

IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header...

CVE-2026-93562 Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling

A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending specially crafted HTTP requests, an attacker can inject arbitrary HTTP requests, potentially bypassing security controls ...