286175 matches found
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-good (UTSA-2026-106456)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106456 advisory. GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...
Flextype CMS 1.0.0-alpha.3 Remote Code Execution
Flextype CMS version 1.0.0-alpha.3 contains a remote code execution vulnerability in the interaction between the Entries API and Shortcodes::registerShortcodes. The /api/v1/entries endpoint accepts an attacker-controlled entry identifier that can contain path traversal sequences, allowing content...
CVE-2026-75429
PowerJob versions 4.x through 5.1.2 expose the /friend/process endpoint on the Server-Worker transport layer (HTTP port 10010) without any authentication. An attacker can invoke an arbitrary public method on any Spring Bean; specifically, calling GroovyEvaluator.evaluate allows execution of arbit...
...[ More ]
Payara Server contains a vulnerability in its Server-Side Includes SSI implementation that allows arbitrary operating system command execution via the exec directive. The issue occurs because user-controlled SSI directives are passed directly to Runtime.exec without validation, sanitization, or...
CVE-2026-78745
An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352EDMO allows a remote attacker to execute arbitrary code via the Android Debug Bridge ADB daemon adbd...
CVE-2026-71620
File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file...
MiracleLinux 8 : gimp:2.8 (AXSA:2026-1773:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1773:01 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: integer overflow in file-fits plugin causes a heap-based buffer overflo...
CVE-2026-75429
PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...
CVE-2026-75431: Use of Hard-coded Cryptographic Key
PowerJob Server version 5.1.2 and likely earlier uses a predictable JWT signing key for HS256-based authentication. This allows a remote attacker to execute arbitrary code...
CVE-2026-78745
The HiDPT / Weyon HiDPTAndroid devices using Hi3751V350 and Hi3751V352E_DMO platforms are vulnerable to remote code execution. The issue resides in the Android Debug Bridge (ADB) daemon (adbd) , which is remotely exposed and lacks expected privilege management restrictions. Specifically, an attac...
PT-2026-86257
An authenticated remote code execution RCE vulnerability in the admin config.php component of seacms v13.6 allows attackers to execute arbitrary code via a crafted POST request...
CVE-2026-79423
The seacms v13.6 software is affected by an authenticated remote code execution (RCE) vulnerability located in the admin_config.php component. An attacker with authentication can execute arbitrary code by sending a crafted POST request . No specific remediation details, exploits, or MITRE ATT&CK ...
The vulnerability of the PDB decoder in the console-based ImageMagick graphics editor allows a hacker to execute arbitrary code.
The vulnerability of the PDB console-based ImageMagick graphics editor relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2026-85781
PowerJob Worker version 5.1.2 and likely earlier versions exposes the /worker/deployContainer HTTP endpoint without authentication on the default transport port. This allows a remote attacker to execute arbitrary code...
CVE-2026-31020
The DocsGPT application (version 0.15.0 and below ) is vulnerable to a server-side template injection (SSTI) in its custom prompt feature. The root cause is the rendering of user-supplied prompt data using Jinja templates without proper input sanitization or sandboxing. An unauthenticated attacke...
EUVD-2026-71453
PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer...
CVE-2026-75431
PowerJob Server version 5.1.2 and likely earlier uses a predictable JWT signing key for HS256-based authentication. This allows a remote attacker to execute arbitrary code...
PT-2026-86247
CVE-2026-50894: Unrestricted file upload in easyadmin v2.0.2.2 enables authenticated RCE and full server takeover. CVSS not scored, but impact is critical. If you use easyadmin, restrict access and audit uploads now. Patch https://t.co/GZLmhBXY4r cybersecurit valtersit CVE CVEAlert infosec SysAdm...
Google Chromium V8 Type Confusion Vulnerability
Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge,...