Lucene search
K

1794 matches found

NVD
NVD
added 2026/04/17 8:16 p.m.2 views

CVE-2026-35546

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain a reverse shell...

9.8CVSS0.00076EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/17 7:39 p.m.16 views

CVE-2026-35546 Anviz Products Missing Authentication for Critical Function

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain a reverse shell...

9.8CVSS0.00076EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/17 7:39 p.m.2 views

CVE-2026-35546

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain a reverse shell...

9.8CVSS5.9AI score0.00076EPSS
Exploits0References4
CVE
CVE
added 2026/04/17 7:39 p.m.9 views

CVE-2026-35546

The CVE-2026-35546 entry affects Anviz CX2 Lite and CX7 devices. The connected sources confirm a vulnerability where unauthenticated firmware uploads allow crafted archives to be accepted, enabling an attacker to plant and execute code and obtain a reverse shell. This indicates a remote code exec...

9.8CVSS5.9AI score0.00076EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/17 7:39 p.m.2 views

CVE-2026-35546 Anviz Products Missing Authentication for Critical Function

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes crafted archives to be accepted, enabling attackers to plant and execute code and obtain a reverse shell...

9.8CVSS5.9AI score0.00076EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2026/04/17 5:46 p.m.63 views

NetServer-RCE-Exploit

🛠️ Configuração do Laboratório Lab Setup Para reproduzir este...

6AI score
Exploits0
GithubExploit
GithubExploit
added 2026/04/17 5:46 p.m.61 views

NetServer-RCE-TEMP

🛠️ Configuração do Laboratório Lab Setup Para reproduzir este...

6AI score
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.2 views

PT-2026-33493

Name of the Vulnerable Software and Affected Versions Anviz CX2 Lite affected versions not specified Anviz CX7 affected versions not specified Description Anviz access control devices allow unauthenticated firmware uploads. This flaw enables attackers to upload crafted archives, which are accepte...

9.8CVSS6.4AI score0.00076EPSS
Exploits0References11
The Hacker News
The Hacker News
added 2026/04/16 6:20 a.m.4 views

UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign

The Computer Emergencies Response Team of Ukraine CERT-UA has disclosed details of a new campaign that has targeted governments and municipal healthcare institutions, mainly clinics and emergency hospitals, to deliver malware capable of stealing sensitive data from Chromium-based web browsers and...

6.2AI score
Exploits0
GithubExploit
GithubExploit
added 2026/04/15 8:41 p.m.85 views

Exploit for CVE-2024-12029

Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE...

9.8CVSS7.5AI score0.44157EPSS
Exploits5
Packet Storm
Packet Storm
added 2026/04/14 12:0 a.m.55 views

📄 WebRemoteControl Unauthenticated Remote Code Execution

WebRemoteControl suffers from an unauthenticated remote code execution vulnerability. Exploit Title: WebRemoteControl - Unauthenticated Remote Code Execution Date: 2026-04-14 Exploit Author: Chokri Hammedi Vendor Homepage: https://github.com/wolfgangasdf/WebRemoteControl Software Link:...

6.4AI score
Exploits0
GithubExploit
GithubExploit
added 2026/04/13 11:32 a.m.266 views

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528 - FlowiseAI CustomMCP Remote Code Execution...

10CVSS5.9AI score0.86202EPSS
Exploits20
GithubExploit
GithubExploit
added 2026/04/12 5:15 a.m.113 views

Exploit for Path Traversal in Gogs

CVE-2025-8110-Authenticated-Remote-Code-Execution-on-Gogs-v0.1...

8.8CVSS6.4AI score0.17737EPSS
Exploits14
GithubExploit
GithubExploit
added 2026/04/11 10:40 p.m.223 views

Exploit for Path Traversal in Gogs

Gogs RCE Exploit CVE-2025-8110 !Pythonhttps://img.shield...

8.8CVSS6AI score0.17737EPSS
Exploits14
Packet Storm
Packet Storm
added 2026/04/10 12:0 a.m.52 views

📄 Horilla 1.3 Remote Command Execution

Horilla versions 1.3 and below suffer from a remote command execution vulnerability. Exploit Title: Horilla v1.3 - RCE Date: 2025-05-29 Exploit Author: Raghad Abdallah Al-syouf Version: = 1.3 Tested on: Ubuntu / Docker CVE: CVE-2025-48868 Description: This script exploits the authenticated RCE...

7.2CVSS6AI score0.04682EPSS
Exploits3
GithubExploit
GithubExploit
added 2026/04/09 9:44 a.m.86 views

Exploit for CVE-2026-34197

Fixed the issue...

8.8CVSS6.6AI score0.83461EPSS
Exploits12
GithubExploit
GithubExploit
added 2026/04/08 6:56 a.m.96 views

Exploit for Eval Injection in Langflow

CVE-2026-33017 - Langflow Unauthenticated RCE...

9.8CVSS6.4AI score0.24652EPSS
Exploits16
Exploit DB
Exploit DB
added 2026/04/08 12:0 a.m.64 views

Horilla v1.3 - RCE

Exploit Title: Horilla v1.3 - RCE Date: 2025-05-29 Exploit Author: Raghad Abdallah Al-syouf Version: = 1.3 Tested on: Ubuntu / Docker CVE: CVE-2025-48868 Description: This script exploits the authenticated RCE vulnerability CVE-2025-48868. It logs into the target web app, creates a project, and...

7.2CVSS5.9AI score0.04682EPSS
Exploits3
Metasploit
Metasploit
added 2026/04/02 7:2 p.m.131 views

HTTP Fetch, Windows Meterpreter Shell, Reverse HTTP Inline

Fetch and execute an x86 payload from an HTTP server. Connect back to attacker and spawn a Meterpreter shell. Requires Windows XP SP2 or newer. Module Options msf use payload/cmd/windows/http/x86/meterpreterreversehttp msf payloadmeterpreterreversehttp show actions ...actions... msf...

5.9AI score
Exploits0
GithubExploit
GithubExploit
added 2026/03/31 9:0 p.m.94 views

Buffer-Overflow-Exploit-C

Buffer Overflow & Stack Smashing Exploit Overview This pro...

6.3AI score
Exploits0
Rows per page
Query Builder