Lucene search
+L

292260 matches found

Nuclei
Nuclei
added 6 days ago132 views

Kafka UI 0.7.1 Command Injection

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/topic/messages. id: CVE-2023-52251 info: name: Kafka UI 0.7.1 Command Injection author: yhy0,iamnoooob severity: high description: | An...

8.8CVSS8.5AI score0.85025EPSS
SaveExploits5References3
Nuclei
Nuclei
added 6 days ago38 views

SmarterMail - Remote Code Execution

SmarterTools SmarterMail build 9511 contains an unauthenticated remote code execution caused by malicious OS command execution via ConnectToHub API method, letting remote attackers execute arbitrary commands, exploit requires no authentication. id: CVE-2026-24423 info: name: SmarterMail - Remote...

9.8CVSS9.9AI score0.87693EPSS
SaveExploits0References4
Nuclei
Nuclei
added 6 days ago162 views

Alcatel-Lucent OmniPCX - Remote Command Execution

The OmniPCX web interface has a script "masterCGI" with a remote command execution vulnerability via the "user" parameter. id: CVE-2007-3010 info: name: Alcatel-Lucent OmniPCX - Remote Command Execution author: king-alexander severity: critical description: | The OmniPCX web interface has a scrip...

10CVSS8.7AI score0.97407EPSS
SaveExploits9References5
Nuclei
Nuclei
added 6 days ago74 views

Klog Server <=2.41 - Unauthenticated Command Injection

Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...

10CVSS9.1AI score0.87987EPSS
SaveExploits9References5
Nuclei
Nuclei
added 6 days ago190 views

Apache Solr <=8.8.1 - Server-Side Request Forgery

Apache Solr versions 8.8.1 and prior contain a server-side request forgery vulnerability. The ReplicationHandler normally registered at "/replication" under a Solr core in Apache Solr has a "masterUrl" also "leaderUrl" alias parameter that is used to designate another ReplicationHandler on anothe...

9.8CVSS8.5AI score0.93053EPSS
SaveExploits5References5
Nuclei
Nuclei
added 6 days ago89 views

Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution

Zoho ManageEngine ADSelfService Plus version 6113 and prior are vulnerable to a REST API authentication bypass vulnerability that can lead to remote code execution. id: CVE-2021-40539 info: name: Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution author:...

9.8CVSS9.3AI score0.9896EPSS
SaveExploits8References5
Nuclei
Nuclei
added 6 days ago101 views

Apache Tomcat Servers - Remote Code Execution

Apache Tomcat servers 7.0.0 to 79 are susceptible to remote code execution. By design, you are not allowed to upload JSP files via the PUT method. This is likely a security measure to prevent an attacker from uploading a JSP shell and gaining remote code execution on the server. However, due to t...

8.1CVSS8.7AI score0.99607EPSS
SaveExploits20References5
Nuclei
Nuclei
added 6 days ago125 views

Worpress Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php file. This is due to an attacker being able to control the values passed to an include, and subsequently leverage that to achieve remote...

9.8CVSS9.1AI score0.97846EPSS
SaveExploits16References5
GithubExploit
GithubExploit
added 6 days ago26 views

Exploit for CVE-2026-66804

CVE-2026-66804: Cross Device Virtual Camera EoP A standard Wi...

7.8CVSS5.6AI score0.03423EPSS
SaveExploits2
EUVD
EUVD
added 6 days ago11 views

EUVD-2026-57695

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...

5.3AI score0.00393EPSS
SaveExploits0References4
EUVD
EUVD
added 6 days ago8 views

EUVD-2026-57696

PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open of the output path in topdf and of stylesheet paths in styletagfor. topdf reads the generated PDF back from its path argument, and styletagfor reads each entry of the stylesheets list, by assigning the path to a...

5.4AI score0.00534EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 6 days ago21 views

Exploit for CVE-2026-14282

CVE-2026-14282 — GoDAM WordPress Plugin RCE Author: null...

9.8CVSS5.9AI score0.00671EPSS
SaveExploits1
NVD
NVD
added 6 days ago11 views

CVE-2026-16770

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...

9.8CVSS0.00393EPSS
SaveExploits0References4
NVD
NVD
added 6 days ago10 views

CVE-2026-17431

PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open of the output path in topdf and of stylesheet paths in styletagfor. topdf reads the generated PDF back from its path argument, and styletagfor reads each entry of the stylesheets list, by assigning the path to a...

6.1CVSS0.00534EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 6 days ago2 views

PT-2026-71782

The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts queries Elastic Defend event data with Kibana's internal Elasticsearch account instead of the account of the requesting user. Only Kibana feature privileges are verified, and the...

7.7CVSS5.3AI score0.00248EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 6 days ago2 views

PT-2026-71830

A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...

10CVSS8.2AI score0.02364EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 6 days ago7 views

CVE-2026-73070

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...

6.8CVSS5.3AI score0.00111EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 6 days ago6 views

CVE-2026-68435

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for the "kexec" command line marker, the kexecload2 path filemode == 0 passes the user-space segment buffer straight to strncmp...

5.5AI score0.00155EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 6 days ago7 views

CVE-2026-72693

openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the documented kbrequest/init usage, the ownership test in authenticateuser relies on stat"/proc//fd/0". stat on /proc//fd/0 follows the symlink to the underlying TTY...

7.8CVSS5.5AI score0.00106EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 6 days ago4 views

PT-2026-71628

rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several code paths, including the RSYNC CONNECT PROG environment variable, daemon hooks, the rsync-ssl wrapper, and...

9.2CVSS5.9AI score0.00515EPSS
SaveExploits0References4
Rows per page
Query Builder