CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1797 matches found

NVD•added 2025/12/11 10:15 p.m.•8 views

CVE-2025-34506

WBCE CMS version 1.6.3 and prior contains an authenticated remote code execution vulnerability that allows administrators to upload malicious modules. Attackers can craft a specially designed ZIP module with embedded PHP reverse shell code to gain remote system access when the module is installed...

8.8CVSS0.00951EPSS

Exploits1References6

OSV•added 2025/12/11 10:15 p.m.•1 views

CVE-2025-34506

8.8CVSS8.2AI score

Exploits0References6

CVE•added 2025/12/11 9:44 p.m.•7 views

CVE-2025-34506

WBCE CMS is affected: version 1.6.3 and earlier are vulnerable to authenticated remote code execution via uploading a malicious module. The flaw arises when an administrator can upload a ZIP module containing embedded PHP reverse shell code, enabling remote system access when installed. Exploitat...

8.8CVSS7.9AI score0.00951EPSS

Exploits1References6Affected Software1

Cvelist•added 2025/12/11 9:44 p.m.•23 views

CVE-2025-34506 WBCE CMS 1.6.3 Authenticated Remote Code Execution via Module Upload

8.6CVSS0.00951EPSS

Exploits1References6

Vulnrichment•added 2025/12/11 9:44 p.m.•2 views

CVE-2025-34506 WBCE CMS 1.6.3 Authenticated Remote Code Execution via Module Upload

8.6CVSS7.9AI score0.00951EPSS

Exploits1References6

Positive Technologies•added 2025/12/11 12:0 a.m.•2 views

PT-2025-50767

Name of the Vulnerable Software and Affected Versions WBCE CMS versions prior to 1.6.3 WBCE CMS version 1.6.3 Description WBCE CMS versions 1.6.3 and earlier have a flaw that permits administrators to execute code remotely by uploading malicious modules. An attacker can create a ZIP module...

8.6CVSS7.1AI score0.00951EPSS

Exploits1References8

GithubExploit•added 2025/12/10 7:21 p.m.•120 views

Exploit for Deserialization of Untrusted Data in Facebook React

🛡️ React2Shell CTF 🚀 !Securityhttps://img.shields.io/badge...

10CVSS7.3AI score0.83197EPSS

Exploits363

RedhatCVE•added 2025/12/10 11:33 a.m.•6 views

CVE-2024-56836

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.0, RUGGEDCOM ROX MX5000RE All versions V2.17.0, RUGGEDCOM ROX RX1400 All versions V2.17.0, RUGGEDCOM ROX RX1500 All versions V2.17.0, RUGGEDCOM ROX RX1501 All versions V2.17.0, RUGGEDCOM ROX RX1510 All versions V2.17.0...

8.8CVSS9AI score0.00015EPSS

Exploits0References1

RedhatCVE•added 2025/12/10 11:33 a.m.•3 views

CVE-2024-56835

8.8CVSS9.1AI score0.00019EPSS

Exploits0References1

RedhatCVE•added 2025/12/10 11:33 a.m.•11 views

CVE-2024-56837

8.6CVSS9AI score0.00017EPSS

Exploits0References1

EUVD•added 2025/12/09 6:30 p.m.•2 views

EUVD-2024-55308

A vulnerability has been identified in RUGGEDCOM ROX II family All versions V2.17.0. During the Dynamic DNS configuration of the affected product it is possible to inject additional configuration parameters. Under certain circumstances, an attacker could leverage this vulnerability to spawn a...

7.7CVSS6.5AI score0.00015EPSS

Exploits0References2

EUVD•added 2025/12/09 6:30 p.m.•2 views

EUVD-2024-55309

A vulnerability has been identified in RUGGEDCOM ROX II family All versions V2.17.0. The DHCP Server configuration file of the affected products is subject to code injection. An attacker could leverage this vulnerability to spawn a reverse shell and gain root access on the affected system...

8.8CVSS6.8AI score0.00019EPSS

Exploits0References2

EUVD•added 2025/12/09 6:30 p.m.•2 views

EUVD-2024-55307

A vulnerability has been identified in RUGGEDCOM ROX II family All versions V2.17.0. Due to the insufficient validation during the installation and load of certain configuration files of the affected device, an attacker could spawn a reverse shell and gain root access on the affected system...

8.6CVSS6.5AI score0.00017EPSS

Exploits0References2

NVD•added 2025/12/09 4:17 p.m.•2 views

CVE-2024-56836

8.8CVSS0.00015EPSS

Exploits0References1

NVD•added 2025/12/09 4:17 p.m.•2 views

CVE-2024-56835

8.8CVSS0.00019EPSS

Exploits0References1

OSV•added 2025/12/09 4:17 p.m.•4 views

CVE-2024-56837