334072 matches found
CVE-2026-79847
CVE-2026-79847 identifies unauthenticated buffer overflow vulnerabilities in AOS-10 that can lead to remote code execution . While the provided documents do not specify the exact affected component or root cause, the vulnerability is rated with a CRITICAL CVSS score of 10.0, indicating high impac...
CVE-2026-79844 Authentication Bypass Leading to Remote Code Execution in AOS-10
Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute...
CVE-2026-79844 Authentication Bypass Leading to Remote Code Execution in AOS-10
Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
██████╗ ██╗ ██╗██████╗ ██████╗ ███████╗██╗ ██╗███████╗██╗...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — чекер уязвимости PHP2Shell Python 3 Python 3 по...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
Patched PHP 7.4 for Synology DSM 6.2 PHP2Shell Unofficial d...
Exploit for CVE-2026-106173
CVE‑2026‑106173 – FortiSIEM phQueryMaste...
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them, ZDI-CAN-33774, can be triggered before any network authentication. T...
Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays
Impact A vulnerability in applications using App router with Cache Component can lead to remote code execution. The application needs to have a use cache function that returns multiple typed arrays. Workaround There is no known workaround for affected applications with such use cache functions. Y...
GHSA-673Q-MJM6-R5XR Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays
Impact A vulnerability in applications using App router with Cache Component can lead to remote code execution. The application needs to have a use cache function that returns multiple typed arrays. Workaround There is no known workaround for affected applications with such use cache functions. Y...
Prototype Pollution
Overview Affected versions of this package are vulnerable to Prototype Pollution via ambiguous path-key encoding in lib/compiler.js, where the compiler tracked table origins using string-rendered path sets rather than per-object tags. Because quoteDottedString quotes a segment only when it contai...
Prototype Pollution
Overview Affected versions of this package are vulnerable to Prototype Pollution via ambiguous path-key encoding in lib/compiler.js, where the compiler tracked table origins using string-rendered path sets rather than per-object tags. Because quoteDottedString quotes a segment only when it contai...
Prototype Pollution
Overview @graphql-tools/utils is a Common package containing utils and types for GraphQL tools Affected versions of this package are vulnerable to Prototype Pollution via mergeIncrementalResult when path segments are processed by setObjectKeyPath. An attacker can supply a path containing a...
Black: GitHub Action installs unvalidated required-version from pyproject.toml
Summary The GitHub Action bundled with Black can read the version from tool.black.required-version if usepyproject is set to True. This version is not validated and therefore can be used to execute untrusted code in the context of a victim's repository. Details This is similar to the previous...
GHSA-CG8M-R9F2-5WM2 Black: GitHub Action installs unvalidated required-version from pyproject.toml
Summary The GitHub Action bundled with Black can read the version from tool.black.required-version if usepyproject is set to True. This version is not validated and therefore can be used to execute untrusted code in the context of a victim's repository. Details This is similar to the previous...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-ioc Were you hit by PHP2Shell? A read-only triage...
CVE-2026-51954
An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirecturi...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell CVE-2026-109618 / CVE-2026-109619 Two critica...