CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface

A remote code execution RCE vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by this issue is minimized by restricting acce...

DRUPAL-CONTRIB-2026-218

The Entity List module provides a way to create lists of entities without Views. The module has a remote code execution vulnerability. The vulnerability is not directly exploitable with the module alone, but multiple serious exploit paths exist with other contributed modules. At least one known...

CVE-2024-50379

Apache Tomcat CVE-2024-50379 TOCTOU Remote Code Execution...

Popcorn-TJNULL-OSCP-

HackTheBox: Popcorn Write-up Date: June 05, 2026 Difficulty: Easy Platform: HackTheBox Key Techniques: Port & Service Enumeration, Directory Fuzzing Gobuster, File Upload Evasion, HTTP Request Manipulation Burp Suite, Remote Code Execution RCE, Advanced TTY Shell Stabilization Python, Local...

CVE-2026-103994

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...

CVE-2026-102084

An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device. If an SRX device configured for AutoDiscovery VPN ADVPN receives a message fr...

CVE-2026-101990

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement...

CVE-2026-101983

A Stack-based Buffer Overflow vulnerability exists in the httpd process of Juniper Networks Junos OS and Junos OS Evolved . This flaw allows an unauthenticated network attacker to achieve remote code execution (RCE) and denial of service (DoS) when a J-Web virtual-domain is configured. No specifi...

EUVD-2026-101309

A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured...

CVE-2026-101983 Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured

A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured...

CVE-2026-101981 Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or execute arbitrary code via a malformed LDP Label Mapping message...

CVE-2020-17533

Recently, a remote code execution vulnerability was discovered in Apache Struts2 CVE ID: CVE-2020-17530. The Apache Struts2 framework is a web framework for developing Java EE web applications. It is widely used, thus the threat impact scope is large. 2. Vulnerability Description If developers...

Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Samsung Image Codec Remote Code Execution ⚙️ What it is A critical vulnerability in Samsung’s image-processing library libimagecodec.quram.so — used on Galaxy Android devices. 🧩 It’s an out-of-bounds write flaw triggered when parsing malicious image files like DNG. 📸 A crafted...

CVE-2024-6387-POC

Exploiting OpenSSH Vulnerability CVE-2024-6387 🚀 A Python script designed to exploit a remote code execution RCE vulnerability in OpenSSH CVE-2024-6387. This vulnerability involves a condition in the handler that can lead to arbitrary code execution, allowing an attacker to gain root access. This...

CVE-2026-92152

The F´ (F Prime) framework, used for spaceflight and embedded software, contains an unvalidated port index vulnerability in Svc::GenericHub (versions 4.1.0 through 4.2.0). The root cause is the lack of an explicit range check on the deserialized port field when passed to functions like serialOut_...

CVE-2026-92152 F´: Unvalidated Port Index in GenericHub

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. From 4.1.0 until 4.2.0, Svc::GenericHub output-port dispatch is vulnerable because the deserialized port field is passed to serialOutout, bufferOutout, eventOutout, or...

CVE-2024-0692-SolarWinds-SEM-RCE

CVE-2024-0692-SolarWinds-SEM-RCE Based on my research during a penetration test, see the details here https://www.sprocketsecurity.com/blog/cve-2024-0692-building-the-exploit-that-didnt-exist...

CVE-2026-33798

A Stack-based Buffer Overflow vulnerability exists in the srxpfe component of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series . This flaw allows an L2-adjacent attacker to achieve arbitrary code execution as root by leveraging high-availability fabric traffic . The vulnerability ...

CVE-2026-33792

A Stack-based Buffer Overflow vulnerability exists in the srxpfe process of Juniper Networks Junos OS running on SRX Series devices. An unauthenticated network attacker can exploit this by sending a crafted packet received on a configured GRE tunnel . Successful exploitation could allow the attac...

CVE-2026-33792 Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured

A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel...