Lucene search
+L

37194 matches found

EUVD
EUVD
•added 2026/01/21 4:26 p.m.•14 views

EUVD-2026-3659

A vulnerability in the read-only maintenance shell of Cisco Intersight Virtual Appliance could allow an authenticated, local attacker with administrative privileges to elevate privileges to root on the virtual appliance. This vulnerability is due to improper file permissions on configuration file...

6CVSS5.7AI score0.00119EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/21 4:26 p.m.•31 views

CVE-2026-20092 Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability

A vulnerability in the read-only maintenance shell of Cisco Intersight Virtual Appliance could allow an authenticated, local attacker with administrative privileges to elevate privileges to root on the virtual appliance. This vulnerability is due to improper file permissions on configuration file...

6CVSS0.00119EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/21 4:26 p.m.•52 views

CVE-2026-20092

CVE-2026-20092 affects Cisco Intersight Virtual Appliance. A read-only maintenance shell exposes a privilege-escalation path: improper file permissions on system-account configuration files allow an authenticated local admin to elevate to root, potentially gaining full control over the appliance ...

6CVSS5.6AI score0.00119EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/21 4:26 p.m.•7 views

CVE-2026-20092 Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability

A vulnerability in the read-only maintenance shell of Cisco Intersight Virtual Appliance could allow an authenticated, local attacker with administrative privileges to elevate privileges to root on the virtual appliance. This vulnerability is due to improper file permissions on configuration file...

6CVSS5.6AI score0.00119EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/21 4:26 p.m.•7 views

CVE-2026-20092

A vulnerability in the read-only maintenance shell of Cisco Intersight Virtual Appliance could allow an authenticated, local attacker with administrative privileges to elevate privileges to root on the virtual appliance. This vulnerability is due to improper file permissions on configuration file...

6CVSS5.6AI score0.00119EPSS
SaveExploits0References2Affected Software1
Cisco
Cisco
•added 2026/01/21 4:00 p.m.•19 views

Cisco IEC6400 Wireless Backhaul Edge Compute Software SSH Denial of Service Vulnerability

A vulnerability in the SSH service of Cisco IEC6400 Wireless Backhaul Edge Compute Software could allow an unauthenticated, remote attacker to cause the SSH service to stop responding. This vulnerability exists because the SSH service lacks effective flood protection. An attacker could exploit th...

5.3CVSS5.6AI score0.00371EPSS
SaveExploits0References1
Cisco
Cisco
•added 2026/01/21 4:00 p.m.•17 views

Cisco Intersight Virtual Appliance Privilege Escalation Vulnerability

A vulnerability in the read-only maintenance shell of Cisco Intersight Virtual Appliance could allow an authenticated, local attacker with administrative privileges to elevate privileges to root on the virtual appliance. This vulnerability is due to improper file permissions on configuration file...

6CVSS5.6AI score0.00119EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/01/21 1:25 p.m.•269 views

Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware

Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability D...

9.8CVSS7.3AI score0.99869EPSS
SaveExploits24
RedhatCVE
RedhatCVE
•added 2026/01/21 6:33 a.m.•27 views

CVE-2026-1222

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

8.6CVSS6.5AI score0.00646EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/01/21 5:03 a.m.•240 views

Exploit for SQL Injection in Progress Moveit_Cloud

MOVEit Transfer 2023 Mass Data Breach Overview This reposi...

9.8CVSS8.8AI score0.99934EPSS
SaveExploits15
GithubExploit
GithubExploit
•added 2026/01/21 2:08 a.m.•282 views

Exploit for OS Command Injection in Exim

Cr.Exim 4.87 - 4.91 - Local Privilege Escalation Cr.Link: https...

10CVSS5.8AI score0.99961EPSS
SaveExploits27
OSV
OSV
•added 2026/01/21 12:31 a.m.•89 views

GHSA-8H3Q-9FPP-C883 Duplicate Advisory: Wrangler affected by OS Command Injection in `wrangler pages deploy`

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36p8-mvp6-cv38. This link is maintained to preserve external references. Original Description SummaryA command injection vulnerability CWE-78 has been found to exist in the wrangler pages deploy command. The iss...

7.7CVSS6.2AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/01/21 12:31 a.m.•30 views

EUVD-2026-3519

SummaryA command injection vulnerability CWE-78 has been found to exist in the wrangler pages deploy command. The issue occurs because the --commit-hash parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of --commit-hash to...

7.7CVSS6.1AI score0.01536EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/21 12:00 a.m.•0 views

CVE-2021-47770: Improper Control of Generation of Code

OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network...

8.8CVSS6.4AI score0.00736EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/21 12:00 a.m.•2 views

CVE-2026-20092: Incorrect Permission Assignment for Critical Resource

A vulnerability in the read-only maintenance shell of Cisco Intersight Virtual Appliance could allow an authenticated, local attacker with administrative privileges to elevate privileges to root on the virtual appliance. This vulnerability is due to improper file permissions on configuration file...

6CVSS6.2AI score0.00119EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/21 12:00 a.m.•3 views

CVE-2021-47817: Improper Neutralization of Input During Web Page Generation

OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability in user profile parameters that authenticated attackers can chain with a file upload to achieve remote code execution. Attackers can exploit the vulnerability by crafting a malicious payload to download and execute a web shell, enablin...

5.4CVSS6.2AI score0.00802EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/01/21 12:00 a.m.•14 views

PT-2026-3798

Name of the Vulnerable Software and Affected Versions OpenEMR version 5.0.2.1 Description OpenEMR contains a cross-site scripting issue that permits authenticated attackers to inject malicious JavaScript through user profile parameters. Exploitation involves crafting a malicious payload to downlo...

5.4CVSS5.4AI score0.00802EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2026/01/21 12:00 a.m.•28 views

PT-2026-3788

Name of the Vulnerable Software and Affected Versions Cisco Intersight Virtual Appliance affected versions not specified Description A flaw exists in the read-only maintenance shell of the appliance that may allow a local attacker with administrative privileges to gain root access. This is caused...

6CVSS5.4AI score0.00119EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/21 12:00 a.m.•20 views

Cisco IEC6400 Wireless Backhaul Edge Compute Software: Resource Management Error Vulnerability

Cisco IEC6400 Wireless Backhaul Edge Compute Software is a system firmware for edge computing devices developed by the American company Cisco. There is a resource management vulnerability in Cisco IEC6400 Wireless Backhaul Edge Compute Software. This vulnerability stems from the lack of effective...

5.3CVSS5.8AI score0.00371EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/21 12:00 a.m.•17 views

Cisco Intersight security vulnerabilities

Cisco Intersight is an application platform developed by the American company Cisco. It offers intelligent management capabilities, enabling IT organizations to analyze, simplify, and automate their environments in a way that is more advanced than previous generations of tools. Cisco Intersight h...

6CVSS5.8AI score0.00119EPSS
SaveExploits0References2
Rows per page
Query Builder