CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8681 matches found

Positive Technologies•added 2025/12/11 12:00 a.m.•13 views

PT-2025-50767

Name of the Vulnerable Software and Affected Versions WBCE CMS versions prior to 1.6.3 WBCE CMS version 1.6.3 Description WBCE CMS versions 1.6.3 and earlier have a flaw that permits administrators to execute code remotely by uploading malicious modules. An attacker can create a ZIP module...

8.6CVSS7.1AI score0.00909EPSS

SaveExploits1References8

Tenable Nessus•added 2025/12/11 12:00 a.m.•7 views

EulerOS 2.0 SP11 : mod_http2 (EulerOS-SA-2025-2467)

According to the versions of the modhttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In certain proxy configurations, a denial of service attack againstApache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by...

7.5CVSS7.2AI score0.01205EPSS

SaveExploits0References2

GithubExploit•added 2025/12/10 7:21 p.m.•174 views

Exploit for Deserialization of Untrusted Data in Facebook React

🛡️ React2Shell CTF 🚀 !Securityhttps://img.shields.io/badge...

10CVSS7.3AI score0.99802EPSS

SaveExploits391

RedhatCVE•added 2025/12/10 11:33 a.m.•14 views

CVE-2024-56835

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.0, RUGGEDCOM ROX MX5000RE All versions V2.17.0, RUGGEDCOM ROX RX1400 All versions V2.17.0, RUGGEDCOM ROX RX1500 All versions V2.17.0, RUGGEDCOM ROX RX1501 All versions V2.17.0, RUGGEDCOM ROX RX1510 All versions V2.17.0...

8.8CVSS9.1AI score0.00507EPSS

SaveExploits0References1

RedhatCVE•added 2025/12/10 11:33 a.m.•20 views

CVE-2024-56836

8.8CVSS9AI score0.00433EPSS

SaveExploits0References1

RedhatCVE•added 2025/12/10 11:33 a.m.•28 views

CVE-2024-56837

8.6CVSS9AI score0.00517EPSS

SaveExploits0References1

Ubuntu•added 2025/12/09 8:14 p.m.•14 views

USN-7918-1: Netty vulnerabilities

Jeppe Bonde Weikop discovered that Netty incorrectly parsed HTTP messages. When Netty is used with certain reverse proxies, a remote attacker could possibly use this issue to perform HTTP request smuggling attacks. CVE-2025-58056 Jonas Konrad discovered that Netty did not properly manage memory...

7.5CVSS6.4AI score0.00677EPSS

SaveExploits2

Metasploit•added 2025/12/09 6:55 p.m.•387 views

TFTP Fetch, Linux Command Shell, Reverse TCP Inline

Fetch and execute an PPC payload from an TFTP server. Connect back to attacker and spawn a command shell Module Options msf use payload/cmd/linux/tftp/ppc/shellreversetcp msf payloadshellreversetcp show actions ...actions... msf payloadshellreversetcp set ACTION msf payloadshellreversetcp show...

5.8AI score

SaveExploits0

Metasploit•added 2025/12/09 6:55 p.m.•356 views

HTTP Fetch, Linux Command Shell, Reverse TCP Inline

Fetch and execute an PPC payload from an HTTP server. Connect back to attacker and spawn a command shell Module Options msf use payload/cmd/linux/http/ppc/shellreversetcp msf payloadshellreversetcp show actions ...actions... msf payloadshellreversetcp set ACTION msf payloadshellreversetcp show...

5.8AI score

SaveExploits0

EUVD•added 2025/12/09 6:30 p.m.•13 views

EUVD-2024-55307

A vulnerability has been identified in RUGGEDCOM ROX II family All versions V2.17.0. Due to the insufficient validation during the installation and load of certain configuration files of the affected device, an attacker could spawn a reverse shell and gain root access on the affected system...

8.6CVSS6.5AI score0.00517EPSS

SaveExploits0References2

EUVD•added 2025/12/09 6:30 p.m.•13 views

EUVD-2024-55308

A vulnerability has been identified in RUGGEDCOM ROX II family All versions V2.17.0. During the Dynamic DNS configuration of the affected product it is possible to inject additional configuration parameters. Under certain circumstances, an attacker could leverage this vulnerability to spawn a...

7.7CVSS6.5AI score0.00433EPSS

SaveExploits0References2

EUVD•added 2025/12/09 6:30 p.m.•13 views

EUVD-2024-55309

A vulnerability has been identified in RUGGEDCOM ROX II family All versions V2.17.0. The DHCP Server configuration file of the affected products is subject to code injection. An attacker could leverage this vulnerability to spawn a reverse shell and gain root access on the affected system...

8.8CVSS6.8AI score0.00507EPSS

SaveExploits0References2

NVD•added 2025/12/09 4:17 p.m.•14 views

CVE-2024-56836

8.8CVSS0.00433EPSS

SaveExploits0References1

OSV•added 2025/12/09 4:17 p.m.•11 views

CVE-2024-56836

8.8CVSS5.8AI score0.00433EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•13 views

CVE-2024-56837

8.6CVSS0.00517EPSS

SaveExploits0References1

OSV•added 2025/12/09 4:17 p.m.•15 views

CVE-2024-56837

8.6CVSS5.7AI score0.00517EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•15 views

CVE-2024-56835

8.8CVSS0.00507EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•6 views

CVE-2024-56837

8.6CVSS8.9AI score0.00517EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•36 views

CVE-2024-56837

8.6CVSS0.00517EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•28 views

CVE-2024-56837

Siemens RUGGEDCOM ROX II family devices (ROX II) prior to v2.17.0 are affected by a code-injection vulnerability caused by insufficient validation during installation and loading of certain configuration files. Several sources document that an attacker could exploit this to spawn a reverse shell ...

8.6CVSS8.9AI score0.00517EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by