CVE-2026-79857 Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol

There is a command injection vulnerability in the PAPI protocol Aruba's access point management protocol of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets to the affected UDP port. Successful exploitation of this vulnerability results in the...

CVE-2026-79857

Technical details for CVE-2026-79857 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-79854 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10

A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-79852 Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface

A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-79851

A vulnerability exists in AOS-10 involving an unauthenticated buffer overflow that can lead to remote code execution . While the provided documents do not specify the exact component or root cause, the high severity score (10.0) indicates a significant risk to confidentiality, integrity, and avai...

CVE-2026-79849 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...

CVE-2026-79847

CVE-2026-79847 identifies unauthenticated buffer overflow vulnerabilities in AOS-10 that can lead to remote code execution . While the provided documents do not specify the exact affected component or root cause, the vulnerability is rated with a CRITICAL CVSS score of 10.0, indicating high impac...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

██████╗ ██╗ ██╗██████╗ ██████╗ ███████╗██╗ ██╗███████╗██╗...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — чекер уязвимости PHP2Shell Python 3 Python 3 по...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

Patched PHP 7.4 for Synology DSM 6.2 PHP2Shell Unofficial d...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator = 1.7.7 - Authenticated Editor+ Arbitrary File Upload The WordPress S2B AI Assistant plugin versions 2.47 and prior contains an arbitrary file upload vulnerability that allows authenticated WordPress users with Editor role or...

CVE-2023-31446-Remote-Code-Execution

CVE-2023-31446-Remote-Code-Execution Repository contains description for CVE-2023-31446 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-31446 Vendor: Cassia Networks Product: Cassia Gateway Firmware Version: http:///bypass/config?type=sqs&keyId=&key=&queueUrl= Base...

Black: GitHub Action installs unvalidated required-version from pyproject.toml

Summary The GitHub Action bundled with Black can read the version from tool.black.required-version if usepyproject is set to True. This version is not validated and therefore can be used to execute untrusted code in the context of a victim's repository. Details This is similar to the previous...

GHSA-CG8M-R9F2-5WM2 Black: GitHub Action installs unvalidated required-version from pyproject.toml

Summary The GitHub Action bundled with Black can read the version from tool.black.required-version if usepyproject is set to True. This version is not validated and therefore can be used to execute untrusted code in the context of a victim's repository. Details This is similar to the previous...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-ioc Were you hit by PHP2Shell? A read-only triage...

CVE-2026-51954

An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirecturi...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell CVE-2026-109618 / CVE-2026-109619 Two critica...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618-POC Multipart OOM bailout corruption trigger...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell Check websites and servers for PHP2Shell CVE-2026...

Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

Impact A memory-related vulnerability has been discovered in an upstream library used for Image Optimization can lead to possible remote code execution RCE when Next.js runs on glibc-based Linux. Workaround Ensure the version of sharp used by Next.js is greater than or equal to 0.35.5. Fresh...