271289 matches found
CVE-2026-50768
File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function...
CVE-2026-39254
Buffer Overflow vulnerability in SteelSeries GG macOS v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, CxAudioHidDevice::DeviceGetDescriptionString components...
CVE-2026-67868
A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems processing. This allows a remote attacker to execute arbitrary code...
CVE-2026-67966
Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...
PT-2026-76679
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /add prompts endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be...
EUVD-2026-60358
File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function...
PT-2026-76767
Name of the Vulnerable Software and Affected Versions Forminator versions prior to the patch released in response to this disclosure Description An unauthenticated arbitrary file upload flaw allows an attacker to upload malicious PHP files to the server, leading to Remote Code Execution RCE, whic...
PT-2026-76678
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /create project endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gstreamer1-plugins-good (UTSA-2026-022351)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022351 advisory. GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: redis (UTSA-2026-100781)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100781 advisory. Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK...
The vulnerability of the demonstration application “Number Guess” on the Apache Tomcat application server allows a hacker to execute arbitrary code.
The vulnerability of the demonstration application “Number Guess” in the Apache Tomcat application server is related to deficiencies in the security measures used to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2026-68004
An issue in OSSRS SRS Simple Realtime Server v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration security.enabled, SrsSecurity::check, trunk/src/app/srsappsecurity.cpp, and SRS RTMP listener components...
ROS-20260817-73-0216
The vulnerability in Ruby is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20260817-73-0215
The vulnerability in Ruby is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Apache Solr <=8.3.1 - Remote Code Execution
Apache Solr versions 5.0.0 to 8.3.1 are vulnerable to remote code execution vulnerabilities through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset velocity/ directory or as a parameter. A user defined configset could contain renderable,...
MINI-Q4C3-FFQV-PX2F
Bulletin has no description...
MINI-MR7M-M89X-FV5V
Bulletin has no description...
Hack-The-Box-Connected-Full-Machine-Walkthrough
Hack The Box — Connected Platform: Hack The Box Mac...
Exploit for Insertion of Sensitive Information into Log File in Hitachi Configuration_Manager
cve-2025-5781FreePBX In August 2025, a critical vulnerabilit...
CVE-2026-17087
creationtimestamp| type| source ---|---|--- 2026-08-16 08:00:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt6psdpf6i22 2026-08-16 10:16:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mt6xfvz76g2p...