CVE-2025-25793

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminnotify.php...

CVE-2025-25792

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...

CVE-2025-25813

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminfiles.php...

CVE-2025-25789

FoxCMS v1.2.5 was discovered to contain a remote code execution RCE vulnerability via the index method at \controller\Sitemap.php...

CVE-2025-26264

GeoVision GV-ASWeb with the version 6.1.2.0 or less fixed in 6.2.0, contains a Remote Code Execution RCE vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server,...

CVE-2025-25794

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminping.php...

CVE-2025-25802

SeaCMS version 13.3 contains a Remote Code Execution (RCE) vulnerability located in the admin_ip.php component. The root cause is identified as Improper Neutralization of Special Elements used in a Command (CWE-77), which could allow an attacker to execute arbitrary code. To remediate this, users...

CVE-2025-25789

FoxCMS v1.2.5 was discovered to contain a remote code execution RCE vulnerability via the index method at \controller\Sitemap.php...

CVE-2025-25796

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component admintemplate.php...

CVE-2025-25793

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminnotify.php...

CVE-2025-25792

SeaCMS v13.3 contains a Remote Code Execution (RCE) vulnerability caused by the improper neutralization of special elements used in a command (CWE-77). The flaw exists in the isopen parameter at the admin_weixin.php endpoint, allowing an attacker to execute arbitrary code remotely. Practical cons...

CVE-2025-25789

FoxCMS version 1.2.5 is vulnerable to a remote code execution (RCE) vulnerability originating from the index() method located at \controller\Sitemap.php . This flaw allows an attacker to execute arbitrary code on the target system. As a temporary workaround until a formal patch is released, it is...

CVE-2024-57685

An issue in sparkshop v.1.1.7 and before allows a remote attacker to execute arbitrary code via a crafted phar file...

(Pwn2Own) Apple Safari B3 JIT Compiler Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the B3 JIT compiler...

PT-2025-7327 · Pytorch +1 · Pytorch +1

Name of the Vulnerable Software and Affected Versions: InvokeAI affected versions not specified Description: The issue concerns an unsafely deserialized file download in the backend, potentially allowing remote code execution RCE through PyTorch's torch.load function. Recommendations: At the...

CVE-2025-24893

CVE-2025-24893 affects XWiki Platform and enables unauthenticated remote code execution via the SolrSearch macro, where user-controlled input is evaluated by the Groovy engine, leading to arbitrary command execution and impact to confidentiality, integrity, and availability of the whole installat...

CVE-2025-26613

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. An OS Command Injection vulnerability was discovered in the WeGIA application, gerenciarbackup.php endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely. This issue ha...

CVE-2025-1302

CVE-2025-1302 affects jsonpath-plus

CVE-2024-35373

Mocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php...

PT-2025-6710 · Apache · Apache Ignite

Name of the Vulnerable Software and Affected Versions: Apache Ignite versions 2.6.0 through 2.17.0 Description: The vulnerability could be exploited if an attacker manually crafts an Ignite message containing a vulnerable object whose class is present in the Ignite server classpath and sends it t...