EUVD-2026-67809

BISHENG before 2.6.0 contains a remote code execution vulnerability in the workflow runonce endpoint that allows authenticated users to execute arbitrary Python code. Attackers can submit crafted Code node definitions to the POST /api/v1/workflow/runonce endpoint, which executes them with exec...

CVE-2026-82278

BISHENG versions before 2.6.0 contain an authenticated remote code execution vulnerability in the POST /api/v1/workflow/run_once endpoint. Crafted Code node definitions submitted by authenticated users are executed via exec() without sandboxing , granting access to the filesystem, credentials, an...

CVE-2026-81757

Author Remote Code Execution RCE in Rank Math SEO = 1.0.276 versions...

EUVD-2026-66209

Trestle has Server-Side Template Injection SSTI via Recursive Template Re-evaluation of Untrusted Data...

BIT-GITLAB-2026-10053 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to achieve remote code execution due to a path traversal vulnerability in the package...

BIT-GITEA-2026-60004

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation...

CVE-2026-81757

CVE-2026-81757 is a Remote Code Execution (RCE) vulnerability in the Rank Math SEO WordPress plugin, affecting versions ≤ 1.0.276 . The flaw is exploitable by users with Author -level permissions, meaning a low-privilege authenticated user can escalate to full code execution on the server. The CV...

CVE-2026-81757 WordPress Rank Math SEO plugin <= 1.0.276 - Remote Code Execution (RCE) vulnerability

Author Remote Code Execution RCE in Rank Math SEO = 1.0.276 versions...

EUVD-2026-67730

Author Remote Code Execution RCE in Rank Math SEO = 1.0.276 versions...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Improper neutralization of parameter/argument delimiters in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Exploit for Eval Injection in Langflow

CVE-2026-33017 - Langflow Unauthenticated RCE Exploit 📋 Ov...

CVE-2026-82244

Budibase versions before 3.41.3 contain a remote code execution vulnerability in plugin handling that allows authenticated admin users to execute arbitrary code by uploading a malicious plugin tarball. The server calls eval on plugin JavaScript files without sandboxing in the main Node.js process...

CVE-2026-40013

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of...

CVE-2025-6000

CVE-2025-6000 — Esecuzione di Codice Privilegiata in HashiCorp Vault PoC Proof-of-concept per CVE-2025-6000 , una vulnerabilità di escalation dei privilegi fino a RCE nei backend di audit di HashiCorp Vault. Il dispositivo di audit consente a un chiamante privilegiato di controllare le opzioni...

CVE-2026-82244 Budibase before 3.41.3 Remote Code Execution via Plugin eval()

Budibase versions before 3.41.3 contain a remote code execution vulnerability in plugin handling that allows authenticated admin users to execute arbitrary code by uploading a malicious plugin tarball. The server calls eval on plugin JavaScript files without sandboxing in the main Node.js process...

EUVD-2026-67696

Budibase versions before 3.41.3 contain a remote code execution vulnerability in plugin handling that allows authenticated admin users to execute arbitrary code by uploading a malicious plugin tarball. The server calls eval on plugin JavaScript files without sandboxing in the main Node.js process...

CVE-2026-82244

Budibase versions before 3.41.3 are affected by a remote code execution vulnerability in plugin handling. The server calls eval() on plugin JavaScript files without sandboxing in the main Node.js process, allowing an authenticated admin user to execute arbitrary code by uploading a malicious plug...