...[ More ]

This Python proof-of-concept targets AXIS Camera Station through its Axis.Remoting communication interface, using a crafted .NET deserialization payload to achieve remote code execution. The exploit implements the application's encrypted communication protocol, including RSA certificate exchange,...

Eclipse Che machine exec command injection vulnerability

In Eclipse Che Machine Exec versions 7.0.0 through 7.122.0, there is a command injection vulnerability. This vulnerability arises because the che-machine-exec service, when constructing shell commands, incorporates user-controllable inputs such as username and namespace fields from the /exec/init...

VulnCheck KEV: CVE-2026-103688

The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its accepted file types setting is left empty, which it documents as the way to accept all files, allowing unauthenticated users to upload arbitrary files, including PHP files that...

N-able N-central Monitoring Code Execution

The vulnerability in the N-able N-central monitoring and IT infrastructure management platform involves improper handling of instructions in statically saved code. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

PT-2026-128319

Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. T...

PT-2026-128325

Name of the Vulnerable Software and Affected Versions Alpine iLX-F511 affected versions not specified Description An issue exists in the Android Auto service where the system fails to properly validate the length of user-supplied data before copying it into a fixed-length stack-based buffer. This...

PT-2026-128324

Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this...

VMSA-2026-0008: Node.js Brotli decoder out-of-bounds write remote code execution vulnerability (CVE-2026-111497)

Advisory ID: | VMSA-2026-0008.1 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 7.5-9.8 Synopsis: | Node.js Brotli decoder out-of-bounds write remote code execution vulnerability CVE-2026-111497 Issue date: | 2026-10-27 Updated on: | 2026-10-28 CVEs | CVE-2026-111497 1. Impacted Products...

Apache Tomcat 11.0.1 Race Condition / Remote Code Execution

Apache Tomcat versions 9.0.0.M1 through 9.0.97, 10.1.0-M1 through 10.1.33, and 11.0.0-M1 through 11.0.1 contain a race condition that can allow JSP execution when the DefaultServlet is writable on a case-insensitive filesystem. This proof of concept uses concurrent PUT and GET requests to...

MONAI Project code injection vulnerability

In versions MONAI 1.2.0 through 1.6.1, there is a code injection vulnerability. This vulnerability arises because ConfigWorkflow.init passes the bundle’s configs/logging.conf to logging.config.fileConfig, which then executes eval on the handler class and args fields. As a result, attackers can...

CVE-2026-84999: Pie Register Pie Register Premium: The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and…

The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 3.8.4.0 via the pieregfileupload function. This is due to the plugin performing file type validation via wpcheckfiletype and wpcheckfiletypeandext but never checking...

CVE-2026-103408: Juniper Networks Session Smart Router: A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an…

A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achieve remote code execution via a malicious DHCP reply...

Fastjson 1.2.83 Remote Code Execution

Fastjson versions 1.2.68 through 1.2.83 contain a remote code execution vulnerability when parsing attacker-controlled JSON in a Spring Boot executable fat-JAR. A proof of concept is included. https://packetstorm.news/download/238048...

PT-2026-127792

Name of the Vulnerable Software and Affected Versions Pie Register Premium versions prior to 3.8.4.1 Description An unrestricted file type upload flaw exists in the piereg file upload function. The issue occurs because the plugin uses wp check filetype and wp check filetype and ext for validation...

Ultralytics command injection vulnerability

Version 8.4.65 of Ultralytics contains a command injection vulnerability. This flaw arises because the torchsafeload function fails to perform adequate validation on user-supplied strings prior to invoking system calls; as a result, remote attackers can execute arbitrary code after users have...

Dell PowerProtect Data Domain digital error vulnerability

Versions 7.7.1.0 through 8.8 of Dell PowerProtect Data Domain, versions 7.13.1.0 through 7.13.1.80 of LTS2024, versions 8.3.1.0 through 8.3.1.40 of LTS2025, and versions 8.6.1.0 through 8.6.1.20 of LTS2026 contain a numeric error vulnerability. This vulnerability stems from integer overflow or...

CVE-2026-103688: Unknown Checkout Files Upload for WooCommerce: The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its…

The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its accepted file types setting is left empty, which it documents as the way to accept all files, allowing unauthenticated users to upload arbitrary files, including PHP files that...

CVE-2026-67074: HCL Software BigFix AEX: HCL BigFix AEX is affected by a Remote Code Execution Vulnerability

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise...

CVE-2026-118616: Improper Control of Generation of Code

Ultralytics parsemodel Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op...

XWiki SAS Pro Macros code injection vulnerability

Versions 1.13 through 1.14.5 of XWiki SAS Pro Macros contain a code injection vulnerability. This vulnerability arises because the “excerpt-include” macro fails to properly escape the title of the included page, allowing the “excerpt” content to be executed with macro privileges. Both title...