CVE-2026-72984

CVE-2026-72984 is a type confusion vulnerability in Microsoft Edge (Chromium-based) , described as an "access of resource using incompatible type." This flaw allows an unauthorized attacker to achieve remote code execution over a network, provided user interaction is required (e.g., the victim vi...

CVE-2026-66798 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66798 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66798

Microsoft Edge (Chromium-based) is affected by a Use After Free vulnerability that allows an unauthorized attacker to execute code over a network . The CVSS 3.1 base score is 4.3 (MEDIUM) , with an attack vector of network, low complexity, no privileges required, but user interaction required . N...

EUVD-2026-67849

Improper neutralization of parameter/argument delimiters in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66323

Microsoft Edge (Chromium-based) is affected by an improper neutralization of parameter/argument delimiters vulnerability that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 5.4 (Medium) , reflecting a network attack vector with low complexi...

CVE-2023-22527-confluence

CVE-2023-22527-confluence Confluence CVE-2023-22527 PoC reale Utilizzo Scarica bun https://github.com/oven-sh/bun/releases Avvia ngrok root@kitploit: ngrok tcp 4444 Mettiti in ascolto su localhost 4444 root@kitploit: nc -nvlp 4444 Esegui l'exploit root@kitploit: bun exploit-CVE-2023-22527.js...

Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)

Summary Yamcs compiles StreamSQL query expressions to Java at runtime with Janino. The LIKE operator inserts the user-supplied pattern into the generated Java unescaped, inside a "..." literal, so a pattern containing " breaks out and injects arbitrary Java e.g. a static block that runs an OS...

CVE-2026-55565 Yamcs: Authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs LikeExpression.fillCodegetValueReturn in yamcs-core/src/main/java/org/yamcs/yarch/streamsql/LikeExpression.java inserts an unescaped LIKE pattern into Java source compiled by Expression.getCompiledExpression through...

CVE-2026-55565

Yamcs (mission control framework) is vulnerable to authenticated remote code execution in LikeExpression.fillCode_getValueReturn, where an unescaped StreamSQL LIKE pattern is injected into Java source compiled at runtime by Janino (SimpleCompiler.cook). A " in the pattern breaks out of the genera...

EUVD-2026-67844

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs LikeExpression.fillCodegetValueReturn in yamcs-core/src/main/java/org/yamcs/yarch/streamsql/LikeExpression.java inserts an unescaped LIKE pattern into Java source compiled by Expression.getCompiledExpression through...

CVE-2026-55565 Yamcs: Authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs LikeExpression.fillCodegetValueReturn in yamcs-core/src/main/java/org/yamcs/yarch/streamsql/LikeExpression.java inserts an unescaped LIKE pattern into Java source compiled by Expression.getCompiledExpression through...

Nagios-CVE-2019-15949-RCE

Nagios-CVE-2019-15949-RCE-Poc un PoC Python per la CVE-2019-15949 Panoramica Esiste una vulnerabilità in Nagios XI = 5.6.5 che consente a un attaccante di sfruttare una RCE per elevare i privilegi a root. L'exploit richiede l'accesso al server come utente 'nagios', oppure l'accesso CCM tramite...

Yamcs vulnerable to Remote Code Execution via instance-template argument YAML injection (createInstance)

Summary templateArgs sent to POST /api/instances and PATCH /api/instances/instance are written into the rendered instance config as raw text, then parsed as YAML and loaded. Yamcs instantiates each services: entry by its class:, so injecting YAML through a template arg lets you add a services:...

GHSA-73MF-M39P-WPM9 Yamcs vulnerable to Remote Code Execution via instance-template argument YAML injection (createInstance)

Summary templateArgs sent to POST /api/instances and PATCH /api/instances/instance are written into the rendered instance config as raw text, then parsed as YAML and loaded. Yamcs instantiates each services: entry by its class:, so injecting YAML through a template arg lets you add a services:...

CVE-2026-55559 Yamcs: Remote Code Execution via instance-template argument YAML injection (createInstance)

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts templateArgs from POST /api/instances and PATCH /api/instances/instance into YAML through VarStatement.append in yamcs-core/src/main/java/org/yamcs/templating/VarStatement.java without YAML-context escaping. The...

CVE-2026-55559 Yamcs: Remote Code Execution via instance-template argument YAML injection (createInstance)

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts templateArgs from POST /api/instances and PATCH /api/instances/instance into YAML through VarStatement.append in yamcs-core/src/main/java/org/yamcs/templating/VarStatement.java without YAML-context escaping. The...

EUVD-2026-67843

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts templateArgs from POST /api/instances and PATCH /api/instances/instance into YAML through VarStatement.append in yamcs-core/src/main/java/org/yamcs/templating/VarStatement.java without YAML-context escaping. The...