com.ebay:lightning-client (0.9.0), com.ebay:lightning-core (0.9.0) +1 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.0.1.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - com.ebay:lightning-client 0.9.0 -...

io.fabric8:process-spring-boot-container (>=1.1.0.cr3, <=1.1.0.cr5), io.fabric8:process-spring-boot-itests-invoicing (1.1.0.cr3) +2 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.3.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - io.fabric8:process-spring-boot-container...

com.revinate:henicea (>=1.0.0, <=1.1.2), de.codecentric:spring-boot-starter-batch-web (1.3.5.release) +20 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.2.4.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - com.revinate:henicea =1.0.0, =0.15.4, =0.15.4...

com.netflix.spectator:spectator-web-spring (>=0.41.0, <=0.42.0), org.apache.camel:camel-example-spring-boot (>=2.16.3, <=2.16.5) +8 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.2.8.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - com.netflix.spectator:spectator-web-spring...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.10, <=0.1.12), com.github.surpassm:liaoin-security-app (0.0.1.release) +7 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.15.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

org.springframework.boot:spring-boot-starter-remote-shell (1.1.10.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.10.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

org.springframework.boot:spring-boot-starter-remote-shell (1.1.12.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.12.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

com.jdcloud.jdsf:spring-cloud-jdsf-core (1.0.0-edgware), org.springframework.boot:spring-boot-starter-remote-shell (1.5.20.release) +21 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.5.20.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.5.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - com.jdcloud.jdsf:spring-cloud-jdsf-core...

org.springframework.boot:spring-boot-starter-remote-shell (1.1.2.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.2.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

com.hotels:waggle-dance-api (>=2.0.0, <=2.1.0), com.netflix.genie:genie-app (>=3.0.0-rc.26, <=3.0.11) +11 more potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.3.8.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: - com.hotels:waggle-dance-api =2.0.0,...

org.springframework.boot:spring-boot-starter-remote-shell (1.1.1.release) potentially affected by CVE-2026-22733 via org.springframework.boot:spring-boot-starter-actuator (1.1.1.release)

org.springframework.boot:spring-boot-starter-actuator MAVEN version 1.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-starter-actuator and may be impacted: -...

CVE-2026-26478

The Mobvoi Tichome Mini smart speaker (firmware versions 012 and 027 ) is vulnerable to a shell command injection via a specially crafted UDP datagram sent to port 35670 . The flaw originates from an IPC mechanism using the C system() function to process messages, which allows remote attackers to...

SofaWiki 3.9.2 Shell Upload

This is a proof of concept remote shell upload exploit for SofaWiki version 3.9.2 that leverages an issue originally discovered in 2024...

📄 Pterodactyl Panel Remote Code Execution

This Metasploit module exploits a remote code execution vulnerability in Pterodactyl Panel versions before 1.11.11. The vulnerability allows an attacker to write a malicious PHP file via the locale functionality and then execute it to gain a reverse shell...

Ilevia EVE X1 Server

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary shell commands and the disclosure of sensitive system information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...

Exploit for OS Command Injection in Gerapy

CVE-2021-43857-Gerapy-v0.9.7 - login to portal as admin - add...

A malicious rsh server can overwrite arbitrary files in a directory on the rcp client machine

An issue was discovered in rcp in NetKit through 0.17. For an rcp operation, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned. A malicious rsh server or Man-in-The-Middle attacker can overwrite...

CVE-2023-40303

GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary us...

Harvest May Expose OS Default SSH Login Password Via SUSE Virtualization Interactive Installer

Impact Projects using the SUSE Virtualization Harvester environment are vulnerable to this exploit if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is utiliz...

PT-2026-6380

Impact Projects using the SUSE Virtualization Harvester environment are vulnerable to this exploit if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is utiliz...