1486 matches found
CVE-2025-25793
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminnotify.php...
CVE-2025-25792
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...
CVE-2025-25813
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminfiles.php...
CVE-2025-25789
FoxCMS v1.2.5 was discovered to contain a remote code execution RCE vulnerability via the index method at \controller\Sitemap.php...
CVE-2025-26264
GeoVision GV-ASWeb with the version 6.1.2.0 or less fixed in 6.2.0, contains a Remote Code Execution RCE vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server,...
CVE-2025-25794
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminping.php...
CVE-2025-25789
CVE-2025-25789 affects FoxCMS v1.2.5 and is described as a remote code execution (RCE) via the index() method in Sitemap.php. The vulnerability is detailed as a high-severity issue (CVSS v3.1: 9.8, CRITICAL) with NETWORK attack vector, LOW attack complexity, no privileges required, no user intera...
CVE-2025-25792
SeaCMS v13.3 has a remote code execution (RCE) vulnerability via the isopen parameter in admin_weixin.php. Documentation confirms SeaCMS v13.3 is affected; no exploit details or fixes are provided in the connected sources. Remediation/patch information is not available in the supplied documents.
CVE-2025-25793
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminnotify.php...
CVE-2025-25802
SeaCMS v13.3 is vulnerable to remote code execution via the admin_ip.php component. The flaw stems from the admin_ip.php path, with confirmed RCE impact in SeaCMS 13.3. No exploit details are provided in the documents; remediation guidance from connected sources suggests upgrading SeaCMS to a new...
CVE-2025-25796
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component admintemplate.php...
CVE-2025-25789
FoxCMS v1.2.5 was discovered to contain a remote code execution RCE vulnerability via the index method at \controller\Sitemap.php...
CVE-2024-57685
An issue in sparkshop v.1.1.7 and before allows a remote attacker to execute arbitrary code via a crafted phar file...
(Pwn2Own) Apple Safari B3 JIT Compiler Integer Underflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the B3 JIT compiler...
PT-2025-7327 · Pytorch +1 · Pytorch +1
Name of the Vulnerable Software and Affected Versions: InvokeAI affected versions not specified Description: The issue concerns an unsafely deserialized file download in the backend, potentially allowing remote code execution RCE through PyTorch's torch.load function. Recommendations: At the...
CVE-2025-24893
CVE-2025-24893 affects XWiki Platform and enables unauthenticated remote code execution via the SolrSearch macro, where user-controlled input is evaluated by the Groovy engine, leading to arbitrary command execution and impact to confidentiality, integrity, and availability of the whole installat...
CVE-2025-26613
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. An OS Command Injection vulnerability was discovered in the WeGIA application, gerenciarbackup.php endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely. This issue ha...
InvokeAI RCE
InvokeAI has a critical vulnerability leading to remote code execution in the /api/v2/models/install API through unsafe model deserialization. The API allows users to specify a model URL, which is downloaded and loaded server-side using torch.load without proper validation. This functionality...