Lucene search
+L

259809 matches found

Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.18 views

PT-2026-63489

Name of the Vulnerable Software and Affected Versions Milos Paripovic OneCommander version 3.96.0.0 Description A flaw in the OneCommander.exe component allows a remote attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that contains a...

8.8CVSS6.2AI score0.00363EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/22 12:0 a.m.22 views

CVE-2025-50324

CVE-2025-50324 affects Milos Paripovic OneCommander v3.96.0.0. The issue allows a remote attacker to execute arbitrary code via the OneCommander.exe component. CVSS 3.1 base score 8.8 (NETWORK/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Documents do not provide exploitation details or remediation guida...

8.8CVSS6.1AI score0.00363EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.34 views

PT-2026-63374

A flaw was found in the Visual Studio Code Ansible Lightspeed extension. This command injection vulnerability CWE-78 arises from improper handling of the ansible.executionEnvironment.containerOptions and ansible.executionEnvironment.volumeMounts settings, allowing an attacker to inject shell...

7.8CVSS6.4AI score0.00473EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/22 12:0 a.m.19 views

Tenable Security Center Multiple Vulnerabilities (TNS-2026-19)

According to its self-reported version, the Tenable Security Center running on the remote host is between 6.7.0 and 6.8.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-19 advisory. - Redis is an in-memory data structure store. In redis-server from 7.2.0 unt...

8.8CVSS8.3AI score0.03301EPSS
SaveExploits7References7
Redos
Redos
added 2026/07/22 12:0 a.m.5 views

ROS-20260722-73-0009

The vulnerability of the Audio component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted HTML page...

8.8CVSS8.5AI score0.00242EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/07/22 12:0 a.m.8 views

The vulnerability of the Microsoft .NET Framework software lies in its lack of data protection mechanisms, which allows attackers to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software platform is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

7.8CVSS5.8AI score0.00949EPSS
SaveExploits0References2Affected Software8
Redos
Redos
added 2026/07/22 12:0 a.m.8 views

ROS-20260722-73-0018

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code through a specially created HTML page...

8.8CVSS8.5AI score0.00307EPSS
SaveExploits0
Redos
Redos
added 2026/07/22 12:0 a.m.6 views

ROS-20260722-73-0034

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.00296EPSS
SaveExploits0
Redos
Redos
added 2026/07/22 12:0 a.m.5 views

ROS-20260722-73-0027

The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.00267EPSS
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2026/07/22 12:0 a.m.12 views

Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network...

9.8CVSS9AI score0.76981EPSS
SaveIn wildExploits4
BDU FSTEC
BDU FSTEC
added 2026/07/22 12:0 a.m.5 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code within the browser’s sandbox.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the browser’s sandbox through the created...

10CVSS8.8AI score0.0028EPSS
SaveExploits1References6Affected Software4
Tenable Nessus
Tenable Nessus
added 2026/07/22 12:0 a.m.13 views

Tenable Security Center Multiple Vulnerabilities (TNS-2026-19)

According to its self-reported version, the Tenable Security Center running on the remote host is between 6.6.0 and 6.8.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-19 advisory. - Tenable Security Center is affected by a SQL injection vulnerability...

9.9CVSS8.2AI score0.49727EPSS
SaveExploits32References49
NVD
NVD
added 2026/07/21 11:16 p.m.19 views

CVE-2026-16418

Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00271EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/21 11:16 p.m.6 views

CVE-2026-16421

Inappropriate implementation in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00341EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/21 11:16 p.m.10 views

CVE-2026-16420

Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00371EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/21 11:16 p.m.6 views

DEBIAN-CVE-2026-16418

Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.5AI score0.00271EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/21 11:16 p.m.4 views

DEBIAN-CVE-2026-16420

Type Confusion in WebAudio in Google Chrome prior to 150.0.7871.182 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.1AI score0.00371EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:19 p.m.8 views

CVE-2026-8984

Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002. A crafted request to the /test endpoint can cause the device to download, extract, and execute attacker-controlled files with root privileges...

10CVSS0.00506EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/21 10:17 p.m.4 views

CVE-2026-43945

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code Execution RCE as root. The exploit succeeds even when the platform is configured in its most secure state Secure Mode Enabled an...

9.3CVSS0.00862EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/21 10:17 p.m.6 views

CVE-2026-43947

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. Version 1.3.0 has an unauthenticated Remote Code Execution vulnerability when secureEnabled is set to true. The POST /api/runscript endpoint checks authorization against the stored script's permission by ID, but when test: tr...

9.3CVSS0.00666EPSS
SaveExploits0References4
Rows per page
Query Builder