333636 matches found
ROS-20261023-73-0135
The vulnerability in rabbitmq-server relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
ROS-20261023-73-0093
The vulnerability of the scalenearestneighbor function in the libheif file format decoder/coder is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
ROS-20261023-73-0223
The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261023-73-0143
The vulnerability in golang-github-prometheus relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261023-73-0145
The vulnerability in golang-github-prometheus relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261023-73-0149
The vulnerability in Jenkins is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PHP 8.4.26 Stale Session Global State Remote Code Execution
PHP version 8.4.26 contains a stale session global state use-after-free that can lead to remote code execution. Included proof of concept uses session upload progress in a local Docker Compose lab. https://packetstorm.news/download/237277...
ROS-20261023-73-0225
The vulnerability in Jenkins is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to achieve arbitrary code execution . The vulnerability originates within the escapeShellString and sanitizeCode functions. The documents do not provide specific details regarding remediation or evidence of in-the-wild ex...
EUVD-2026-109096
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
PT-2026-122137
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
CVE-2026-106763
An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions...
CVE-2026-115560
A flaw in PHP's session upload progress handling can lead to remote code execution when an application sets session.serializehandler to phpbinary or phpserialize in its configuration and switches it to php at runtime with iniset before calling sessionstart, while session.uploadprogress.enabled is...
PHP 8.4.26 session.upload_progress Remote Code Execution
PHP version 8.4.26 under Apache modphp contains a pre-authentication remote code execution vulnerability in session upload progress handling. This proof of concept chains memory disclosure and stale session state to execute commands as the web worker. https://packetstorm.news/download/237267...
ROS-20261023-73-0219
The vulnerability in Jenkins is related to errors in handling HTTP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2026-121839
Name of the Vulnerable Software and Affected Versions AgenticSeek versions prior to commit 409840c Description Remote code execution is possible because the llm server/app.py file hardcodes Flask debug mode while binding to all interfaces. An attacker who can access the server port and obtain the...
Apache ActiveMQ 5.18.2 OpenWire Remote Code Execution
Apache ActiveMQ versions before 5.15.16, 5.16.7, 5.17.6, and 5.18.3 contain an OpenWire deserialization flaw that allows unauthenticated remote code execution. This proof of concept sends a crafted ExceptionResponse frame. https://packetstorm.news/download/237303...
PHP 8.5.11 PHP2Shell Patch Check
PHP versions before 8.2.35, 8.3.36, 8.4.27, and 8.5.12 contain memory safety flaws that can allow remote code execution. The supplied Bash tool checks local CLI, FPM, and Apache PHP component versions against upstream fixed releases...