Lucene search
K

1826 matches found

Positive Technologies
Positive Technologies
added 2026/01/21 12:0 a.m.6 views

PT-2026-3795

Name of the Vulnerable Software and Affected Versions OpenPLC version 3 Description The software contains an authenticated remote code execution issue. An attacker with valid credentials can inject malicious code through the hardware configuration interface. This allows for the upload of a custom...

8.8CVSS6.5AI score0.00634EPSS
Exploits0References6
GithubExploit
GithubExploit
added 2026/01/19 2:51 p.m.311 views

Exploit for CVE-2025-60021

CVE-2025-60021 Roundup Vulnerability Summary CVE-2025-60...

9.8CVSS5.9AI score0.26163EPSS
Exploits3
GithubExploit
GithubExploit
added 2026/01/19 2:51 p.m.217 views

Exploit for CVE-2025-60021

CVE-2025-60021 Roundup Vulnerability Summary CVE-2025-60...

9.8CVSS5.9AI score0.26163EPSS
Exploits3
OSV
OSV
added 2026/01/16 12:16 a.m.3 views

CVE-2021-47794

ZesleCP 3.1.9 contains an authenticated remote code execution vulnerability that allows attackers to create malicious FTP accounts with shell injection payloads. Attackers can exploit the FTP account creation endpoint by injecting a reverse shell command that establishes a network connection to a...

8.8CVSS6.3AI score0.00906EPSS
Exploits1References4
NVD
NVD
added 2026/01/16 12:16 a.m.4 views

CVE-2021-47794

ZesleCP 3.1.9 contains an authenticated remote code execution vulnerability that allows attackers to create malicious FTP accounts with shell injection payloads. Attackers can exploit the FTP account creation endpoint by injecting a reverse shell command that establishes a network connection to a...

8.8CVSS0.00906EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/01/15 11:25 p.m.4 views

CVE-2021-47794

ZesleCP 3.1.9 contains an authenticated remote code execution vulnerability that allows attackers to create malicious FTP accounts with shell injection payloads. Attackers can exploit the FTP account creation endpoint by injecting a reverse shell command that establishes a network connection to a...

8.8CVSS6.5AI score0.00906EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2026/01/15 11:25 p.m.8 views

CVE-2021-47794

CVE-2021-47794 affects ZesleCP 3.1.9. An authenticated attacker can exploit the FTP account creation endpoint to inject a reverse shell command, enabling remote code execution via shell injection in the created FTP accounts. The vulnerability is network-based with low attack complexity and requir...

8.8CVSS8AI score0.00906EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/01/15 11:25 p.m.25 views

CVE-2021-47794 ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated)

ZesleCP 3.1.9 contains an authenticated remote code execution vulnerability that allows attackers to create malicious FTP accounts with shell injection payloads. Attackers can exploit the FTP account creation endpoint by injecting a reverse shell command that establishes a network connection to a...

8.8CVSS0.00906EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/01/15 11:25 p.m.4 views

CVE-2021-47794 ZesleCP 3.1.9 - Remote Code Execution (RCE) (Authenticated)

ZesleCP 3.1.9 contains an authenticated remote code execution vulnerability that allows attackers to create malicious FTP accounts with shell injection payloads. Attackers can exploit the FTP account creation endpoint by injecting a reverse shell command that establishes a network connection to a...

8.8CVSS8AI score0.00906EPSS
Exploits1References4
OSV
OSV
added 2026/01/15 4:16 p.m.3 views

CVE-2021-47772

10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the...

8.4CVSS6.6AI score0.00648EPSS
Exploits1References2
EUVD
EUVD
added 2026/01/15 3:52 p.m.3 views

EUVD-2026-2768

10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the...

9.8CVSS8.3AI score0.00648EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/01/15 3:52 p.m.18 views

CVE-2021-47772 10-Strike Network Inventory Explorer Pro 9.31 - Buffer Overflow (SEH)

10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the...

9.8CVSS0.00648EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.4 views

PT-2026-3047

10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the...

9.8CVSS8.9AI score0.00648EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.5 views

PT-2026-3166

ZesleCP 3.1.9 contains an authenticated remote code execution vulnerability that allows attackers to create malicious FTP accounts with shell injection payloads. Attackers can exploit the FTP account creation endpoint by injecting a reverse shell command that establishes a network connection to a...

8.8CVSS8.4AI score0.00906EPSS
Exploits1References5
NVD
NVD
added 2026/01/13 11:15 p.m.5 views

CVE-2022-50934

Rejected reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue...

0.00204EPSS
Exploits0
OSV
OSV
added 2026/01/13 11:15 p.m.4 views

CVE-2022-50806

4images 1.9 contains a remote command execution vulnerability that allows authenticated administrators to inject reverse shell code through template editing functionality. Attackers can save malicious code in the template and execute arbitrary commands by accessing a specific categories.php...

7.2CVSS6.2AI score0.01088EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2026/01/13 10:53 p.m.3 views

CVE-2025-66802

Sourcecodester Covid-19 Contact Tracing System 1.0 is vulnerable to RCE Remote Code Execution. The application receives a reverse shell php into imagem of the user enabling RCE...

9.8CVSS7AI score0.00791EPSS
Exploits2References1
CVE
CVE
added 2026/01/13 10:52 p.m.9 views

CVE-2022-50934

CVE-2022-50934 entry rejected; CNA withdrew; not a security issue.

8.1AI score0.00204EPSS
Exploits0
Cvelist
Cvelist
added 2026/01/13 10:52 p.m.24 views

CVE-2022-50934

...

0.00204EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2026/01/13 10:51 p.m.5 views

CVE-2022-50806 4images 1.9 - Remote Command Execution (RCE)

4images 1.9 contains a remote command execution vulnerability that allows authenticated administrators to inject reverse shell code through template editing functionality. Attackers can save malicious code in the template and execute arbitrary commands by accessing a specific categories.php...

8.6CVSS6.2AI score0.01088EPSS
Exploits1References3
Rows per page
Query Builder