Astra Linux – Vulnerability in Apache Log4j2

Apache Log4j2 versions 2.0-beta7 through 2.17.0 excluding security fix releases 2.3.2 and 2.12.4 are vulnerable to a remote code execution RCE attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI, provided that the attacker has control over the target LDAP server. Thi...

Astra Linux – Vulnerability in GIMP

GIMP PSD File Parsing: Heap-Based Buffer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability, as the target must visit a malicious page ...

Astra Linux – Vulnerability in Chromium

Using “after free” in Ozone in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

The use of after-free in TabStrip in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of after-free in Media in Google Chrome before version 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The "Type Confusion in Bindings" vulnerability in Google Chrome before version 149.0.7827.103 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Type Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

Important: Red Hat Security Advisory: python-urwid security update

An update for python-urwid is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

CVE-2026-78314

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78316

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78315

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78317

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2022-3552

CVE-2022-3552 BoxBilling=4.22.1.5 - Esecuzione Remota di Codice RCE Utilizzo root@kitploit: python3 .\CVE-2022-3552.py -d http://192.168.228.143 -u [email protected] -p [email protected]...

CVE-2022-46169

Cacti | Bypass dell'autenticazione | RCE | CVE-2022-46169 Cacti: Exploit di esecuzione remota di codice non autenticato in Ruby Cacti Docker Questa è un'applicazione dockerizzata vulnerabile alla vulnerabilità RCE di Cacti CVE-2022-46169. Segui il link per avviare Cacti root@kitploit:...

CVE-2026-48907

CVE-2026-48907 - Joomla! JCE RCE não autenticada Joomla! JCE extension 2.9.99.5 - Upload Arbitrário de Arquivo PHP e Execução Remota de Código não autenticados 🔎 Consultas em Mecanismos de Busca Shodan...

CVE-2025-13486

🔴 CVE-2025-13486 - Exploit del plugin WordPress Advanced Custom Fields Extended ACFE 📋 Panoramica Exploit proof-of-concept per CVE-2025-13486 , una vulnerabilità critica nel plugin WordPress Advanced Custom Fields: Extended ACFE che consente l'esecuzione remota di codice portando all'escalation d...

CVE-2026-78317 DIAEnergie - SQL Injection

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

EUVD-2026-64762

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...

CVE-2026-78317

A SQL Injection vulnerability in Delta DIAEnergie v1.11.00.002 allows a network-based attacker with low privileges to achieve remote code execution , resulting in high impact to confidentiality, integrity, and availability. The NVD-assigned CVSS 3.1 score is 8.8 (High) . No specific remediation v...