Lucene search
+L

1080 matches found

Kitploit
Kitploit
•added 2026/11/13 5:13 p.m.•28 views

tweets_analyzer

Simple Twitter Profile Analyzer The goal of this simple python script is to analyze a Twitter profile through its tweets by detecting: Average tweet activity, by hour and by day of the week Timezone and language set for the Twitter interface Sources used mobile application, web browser,...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/11/13 4:28 a.m.•31 views

CVE-2026-14669

CVE-2026-14669 - PostgreSQL tochar Timezone Abbreviation Heap Buffer Overflow PostgreSQL tochar function has a heap buffer overflow vulnerability when handling timezone formatting. By setting an overly long POSIX timezone abbreviation, an attacker can trigger an out-of-bounds write to a fixed...

8.8CVSS8AI score0.00662EPSS
SaveExploits1References3
Kitploit
Kitploit
•added 2026/11/12 6:47 p.m.•17 views

pfsense-timezone-phpini

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-timezone-phpini pfsense-timezone-phpini Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org system.php writes $POST'timezone' with no inarray against systemgettimezonelist. istimezone...

6AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/11/12 1:42 a.m.•26 views

CVE-2020-24032

CVE-2020-24032 Suggested description tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. VulnerabilityType Other OS command injection Vendor of Product XoruX s.r.o. Affected Product Code Base LPAR2RRD and...

10CVSS8.8AI score0.05373EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2026/11/09 12:00 a.m.•8 views

VulnCheck KEV: CVE-2026-111560

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...

8.6CVSS6.8AI score0.09082EPSS
SaveIn wildExploits1References3
NVD
NVD
•added 2026/11/04 2:17 a.m.•9 views

CVE-2026-121608

A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. This vulnerability affects the function onpushmessage of the file /fs2/bin/iscm of the component Timezone Push Handler. Executing a manipulation of the argument tz can lead to os command injection. The attack may b...

7.5CVSS0.01308EPSS
SaveExploits0References5
CVE
CVE
•added 2026/11/04 1:30 a.m.•19 views

CVE-2026-121608

Qihoo 360 devices, specifically models D603-2 , D600-2 , and D606-6 running firmware versions up to 6.3.2 , are susceptible to an OS command injection vulnerability. The flaw exists within the Timezone Push Handler component, specifically in the on_push_message function of the /fs2/bin/iscm file....

7.5CVSS7AI score0.01308EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/11/04 1:30 a.m.•30 views

CVE-2026-121608 Qihoo 360 D603-2/D600-2/D606-6 Timezone Push iscm on_push_message os command injection

A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. This vulnerability affects the function onpushmessage of the file /fs2/bin/iscm of the component Timezone Push Handler. Executing a manipulation of the argument tz can lead to os command injection. The attack may b...

7.5CVSS0.01308EPSS
SaveExploits0References5
NVD
NVD
•added 2026/11/03 3:17 p.m.•12 views

CVE-2026-121428

AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...

8.8CVSS0.00736EPSS
SaveExploits0References2
osv_mgasa
osv_mgasa
•added 2026/11/03 3:06 p.m.•18 views

MGASA-2026-0572 Updated java-latest-openjdk, timezone, java-21-openjdk, java-17-openjdk packages fix security vulnerabilities

Enhance PKCS5 padding. CVE-2026-83374 Enhance TLS certificate handling. CVE-2026-83376 Improve C2 loop transformations. CVE-2026-83378 Enhance LDAP logins. CVE-2026-83380 Enhance SASL Authentication. CVE-2026-83381 Enhance WebRowSets. CVE-2026-83387 Enhance HTTP Client Response Handling...

7CVSS7.2AI score0.00441EPSS
SaveExploits0References5
CVE
CVE
•added 2026/11/03 2:28 p.m.•26 views

CVE-2026-121428

AzuraCast versions through 0.23.8 are vulnerable to Remote Code Execution (RCE) due to a Supervisor configuration injection flaw in the station timezone field. Authenticated station managers can exploit the profile edit API by submitting a timezone string containing newlines. This allows the inje...

8.8CVSS6.3AI score0.00736EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/03 2:28 p.m.•25 views

CVE-2026-121428 AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone

AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...

8.8CVSS0.00736EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/11/03 2:28 p.m.•16 views

CVE-2026-121428 AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone

AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...

8.7CVSS6.3AI score0.00736EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/11/03 2:28 p.m.•12 views

EUVD-2026-115960

AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...

8.8CVSS6.3AI score0.00736EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/11/03 2:28 p.m.•10 views

CVE-2026-121428 AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone

AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...

8.8CVSS6.3AI score0.00736EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/03 12:00 a.m.•14 views

CVE-2026-121428: AzuraCast: AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to…

AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...

8.8CVSS6.3AI score0.00736EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/11/03 12:00 a.m.•10 views

PT-2026-136185

Name of the Vulnerable Software and Affected Versions AzuraCast versions prior to 0.23.9 Description Authenticated station managers can achieve remote code execution by injecting Supervisor configuration via the station timezone field. By submitting a timezone containing newlines to the profile...

8.8CVSS6.3AI score0.00736EPSS
SaveExploits0References6
NVD
NVD
•added 2026/11/02 1:17 p.m.•14 views

CVE-2026-111560

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...

8.6CVSS0.09082EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/11/02 12:59 p.m.•43 views

CVE-2026-111560 OS Command Injection in Barracuda Appliances

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...

8.6CVSS0.09082EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/11/02 12:59 p.m.•16 views

EUVD-2026-115148

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently...

8.6CVSS6.6AI score0.09082EPSS
SaveExploits1References2
Rows per page
Query Builder