Lucene search
+L

259214 matches found

NVD
NVD
added yesterday5 views

CVE-2026-65548

Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...

9.9CVSS
SaveExploits0References1
NVD
NVD
added yesterday4 views

CVE-2026-53975

OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests to the /api/fs/exec endpoint, which passes commands verbatim to Node.js spawn without any allowlist, blocklist, or...

9.8CVSS
SaveExploits0References3
EUVD
EUVD
added yesterday10 views

EUVD-2026-53912

Shop manager Remote Code Execution RCE in CTX Feed = 6.6.42 versions...

9.1CVSS5.6AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday11 views

CVE-2026-65553 WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...

10CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-53981

Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...

10CVSS5.6AI score
SaveExploits0References1
CVE
CVE
added yesterday22 views

CVE-2026-65553

Unauthenticated Remote Code Execution in WordPress Spider Analyser plugin (

10CVSS5.6AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-65548

Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...

9.9CVSS5.6AI score
SaveExploits0References2
EUVD
EUVD
added yesterday5 views

EUVD-2026-53978

Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...

9.9CVSS5.6AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday9 views

CVE-2026-65548 WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability

Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...

9.9CVSS
SaveExploits0References1
CVE
CVE
added yesterday20 views

CVE-2026-65548

The connected sources confirm a Remote Code Execution (RCE) vulnerability affecting WordPress Betheme theme versions

9.9CVSS5.6AI score
SaveExploits0References1
CVE
CVE
added yesterday11 views

CVE-2026-53975

OpenChamber 1.11.7 is affected by an unauthenticated RCE via POST /api/fs/exec. The endpoint passes commands verbatim to Node.js spawn() without any allowlist or argument validation, enabling remote execution of arbitrary OS commands. The authentication middleware becomes a no-op when UI_PASSWORD...

9.8CVSS6.8AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-66373

A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...

7.5CVSS7.5AI score0.00472EPSS
SaveExploits0References8
OSV
OSV
added yesterday3 views

MAL-2026-13397 Malicious code in @vanexalabs-ai/vanexa-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5de2359eef117d1f491dc2c8628e56d866435912bd6f8e55a10eee8e7a9a6c The package implements a daemon that pairs with a remote peer phone over WebRTC, using https://vanexa-agent-relay.workers.dev and...

6.4AI score
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday4 views

Malicious code in @vanexalabs-ai/vanexa-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5de2359eef117d1f491dc2c8628e56d866435912bd6f8e55a10eee8e7a9a6c The package implements a daemon that pairs with a remote peer phone over WebRTC, using https://vanexa-agent-relay.workers.dev and...

6.4AI score
SaveExploits0References12
RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-67305

The FreeRDP Windows client contains a heap buffer overflow vulnerability. If a user pastes maliciously crafted, oversized clipboard data from an untrusted RDP server, it triggers memory corruption that may result in remote code execution...

9.4CVSS6.2AI score0.00489EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added yesterday5 views

libXfont2: computeProps Property Buffer Heap Buffer Overflow

A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server...

8.8CVSS6.1AI score0.00373EPSS
SaveExploits0References4
NVD
NVD
added yesterday7 views

CVE-2026-66909

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or,...

9.8CVSS
SaveExploits0References2
EUVD
EUVD
added yesterday7 views

EUVD-2026-53854

Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or,...

9.8CVSS5.9AI score
SaveExploits0References1
CVE
CVE
added yesterday20 views

CVE-2026-66909

Summary: CVE-2026-66909 affects Apache CXF's JMS transport, where inbound JMS ObjectMessage bodies are deserialized with no type restrictions, enabling potential denial of service or remote code execution if a gadget class is present on the classpath. The root cause is unrestricted native Java de...

9.8CVSS5.9AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added yesterday7 views

WordPress WPMU DEV Dashboard plugin <= 5.0.0 - Authentication Bypass to Arbitrary plugin Installation (Remote Code Execution) vulnerability

Authentication Bypass to Arbitrary plugin Installation Remote Code Execution vulnerability discovered by Austin Ginder in WordPress Plugin WPMU DEV Dashboard versions = 5.0.0...

8.1CVSS5.5AI score0.0051EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder