261428 matches found
CVE-2026-16723
A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...
CVE-2026-16723
CVE-2026-16723 is a remote-code-execution vulnerability in Fastjson 1.2.68–1.2.83 that is exploitable under stock/default configuration without AutoType or a gadget. Connected docs confirm the attack chain can occur in Spring Boot fat‑JAR deployments: an attacker controls the @type value, Fastjso...
Johnson Controls C-CURE 9000 and Victor application server (Update A)
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker with network access to achieve remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. CISA reminds...
Primetek Primefaces 5.x - Remote Code Execution
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution. id: CVE-2017-1000486 info: name: Primetek Primefaces 5.x - Remote Code Execution author: Moritz Nentwig severity: critical description: Primetek Primefaces 5.x is vulnerable to a weak encryption fl...
n8n - Remote Code Execution via Expression Injection
n8n 1.120.4, 1.121.1, 1.122.0 contains a remote code execution caused by insufficient isolation in workflow expression evaluation, letting authenticated attackers execute arbitrary code with n8n process privileges. Exploit requires authentication. id: CVE-2025-68613 info: name: n8n - Remote Code...
Apache OFBiz - Improper Authorization & Remote Code Execution
Improper Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met...
Apache Kylin 3.0.1 - Command Injection Vulnerability
Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation. id: CVE-2020-1956 info: name: Apache Kylin 3.0.1 - Command Injecti...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 — React2Shell CVSS 10.0 CRITICAL | Pre-Auth...
CVE-2026-52439
An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism...
PT-2026-64200
Name of the Vulnerable Software and Affected Versions Heimdall Data Database Proxy affected versions not specified Description Remote authenticated attackers can execute arbitrary code with root privileges on affected installations. The issue stems from the lack of proper neutralization of CRLF...
VulnCheck KEV: CVE-2026-16723
A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...
PT-2026-64206
Name of the Vulnerable Software and Affected Versions Microsoft Account affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Account, which could allow an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overflow is a memo...
ROS-20260723-73-0071
The vulnerability of the PDFium component in the Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
ROS-20260723-73-0070
The vulnerability of the PDFium component in the Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2026-64192
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.186 Description A use-after-free issue exists in WebMCP, which occurs when an application continues to use a pointer after it has been freed, potentially leading to memory corruption. This flaw allows...
EUVD-2026-48431
An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism...
CVE-2026-52439
An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism...
CVE-2026-52439
An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary code via the type.new function and the property reflection mechanism...
PT-2026-64173
Name of the Vulnerable Software and Affected Versions xiandafu beetl version 3.20.2 Description A remote attacker can execute arbitrary code by leveraging the type.new function and the property reflection mechanism. Property reflection is a process that allows a program to inspect and modify its...