259054 matches found
CVE-2026-51785
CVE-2026-51785 affects Hugo Leisink Hiawatha prior to 12.2. The incident is a remote code execution vulnerability triggered by a crafted request to the server. The available connected documents confirm the flaw and the affected version range, with remediation guidance to upgrade to version 12.2 o...
PT-2026-66867
Name of the Vulnerable Software and Affected Versions ComfyUI version 0.23.0 Description An unsafe deserialization issue exists in the LoadTrainingDataset node. Unauthenticated remote attackers can execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization...
The vulnerability of Google Chrome’s DevTools component allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s DevTools component is related to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of Google Chrome’s FileSystem component, which allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s FileSystem component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
📄 WordPress 7.0.1 Remote Code Execution
A proof of concept exploit for WordPress versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 that contain an unauthenticated remote code execution vulnerability. The exploit chains a REST API batch route confusion vulnerability with a SQL injection vulnerability to write a PHP web shell to the w...
ManageEngine ADAudit Plus < Build 8606 Unauthenticated RCE
The ManageEngine ADAudit Plus running on the remote host is prior to build 8606. It is, therefore, affected by an unauthenticated remote code execution vulnerability: - Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by unauthenticated remote code execution due to the...
Oracle PeopleSoft PeopleTools Multiple Vulnerabilities (CSPU Jun 2026)
The version of Oracle PeopleSoft PeopleTools installed on the remote host is 8.61.x prior to 8.61.20 or 8.62.x prior to 8.62.10. It is, therefore, affected by multiple vulnerabilities as noted in the June 2026 Critical Security Patch Update advisory, whose patches also resolve Oracle Security Ale...
The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the WebRTC component in Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the WebRTC component in Google Chrome browser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the WebML component in the Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the WebML component in Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Security update for valkey (important)
openSUSE security update: security update for valkey ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21485-1 Rating: important References: bsc1272442 bsc1272443 Cross-References: CVE-2026-56684 CVE-2026-63639 CVSS scores: CVE-2026-56684 SUSE : 7.5...
EUVD-2026-51645
An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted request...
PT-2026-66858
Name of the Vulnerable Software and Affected Versions Hugo Leisink Hiawatha versions prior to 12.2 Description A flaw allows a remote attacker to execute arbitrary code by sending a specially crafted request to the server. Recommendations Update Hugo Leisink Hiawatha to version 12.2 or later...
The vulnerability of the Tab Groups component in Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s Tab Groups component is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the WebAudio component in the Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the WebAudio component in the Google Chrome browser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of Google Chrome’s user interface allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s user interface relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Aura component in Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the Aura component in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of Google Chrome browser’s Blink rendering module allows a hacker to execute arbitrary code.
The vulnerability of the Blink rendering module in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-68502
LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an unauthenticated Socket.IO input event handler that dispatches data.get'value' to LazyOwnShell.onecmd, reaching LazyOwnShell.docmd and subprocess.callcommand,...