|
2026-09-11
|
|
CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22_ 10.0 < 10.10_ 11.
|
19 |
REMOTE
|
DigiProSec
|
|
2026-08-25
|
|
CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
|
88 |
REMOTE
|
youcef-!
|
|
2026-08-18
|
|
PCMan 2.0.7 - Buffer Overflow
|
63 |
REMOTE
|
Thiago Cunha
|
|
2026-08-17
|
|
phpSysInfo 3.4.5 - IP Allowlist Bypass
|
58 |
REMOTE
|
Muhammed Mirac Kayikci
|
|
2026-08-17
|
|
ipTIME A3004T - Remote Code Execution
|
59 |
REMOTE
|
Paccaron
|
|
2026-08-17
|
|
D-Link DNS_340L - OS Command Injection
|
50 |
REMOTE
|
Jared Brits
|
|
2026-08-11
|
|
PraisonAI praisonaiagents 1.6.77 - Remote Code Execution
|
55 |
REMOTE
|
banyamer
|
|
2026-08-11
|
|
mcp-server-kubernetes 3.8.x - Argument Injection
|
63 |
REMOTE
|
banyamer
|
|
2026-07-07
|
|
Hydra - Stack Buffer Overflow
|
143 |
REMOTE
|
banyamer
|
|
2026-07-07
|
|
iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter
|
93 |
REMOTE
|
Fares Dahoumane
|
|
2026-05-30
|
|
Notepad++ 8.9.6 - Arbitrary Code Execution
|
247 |
REMOTE
|
Kavin Jindal
|
|
2026-05-29
|
|
Microsoft - NTLMv2 Hash Capture
|
202 |
REMOTE
|
nu11secur1ty
|
|
2026-05-29
|
|
Wing FTP Server 8.1.3 - Authenticated Remote Code Execution
|
123 |
REMOTE
|
Ünsal Furkan Harani
|
|
2026-05-29
|
|
strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow
|
97 |
REMOTE
|
Lukas Johannes Moeller
|
|
2026-05-07
|
|
telnetd 2.7 - Buffer Overflow
|
114 |
REMOTE
|
jeffbarron
|
|
2026-02-11
|
|
Windows 10.0.17763.7009 - spoofing vulnerability
|
361 |
REMOTE
|
beatrizfn
|
|
2026-02-04
|
|
windows 10/11 - NTLM Hash Disclosure Spoofing
|
241 |
REMOTE
|
beatrizfn
|
|
2026-02-04
|
|
Redis 8.0.2 - RCE
|
333 |
REMOTE
|
Beatriz Fresno Naumova
|
|
2026-02-04
|
|
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
|
149 |
REMOTE
|
Beatriz Fresno Naumova
|
|
2025-09-16
|
|
Ilevia EVE X1/X5 Server 4.7.18.0.eden - Reverse Rootshell
|
388 |
REMOTE
|
LiquidWorm
|
|
2025-09-16
|
|
ClipBucket 5.5.0 - Arbitrary File Upload
|
286 |
REMOTE
|
Mukundsinh Solanki (r00td3str0y3r)
|
|
2025-09-16
|
|
ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)
|
197 |
REMOTE
|
Mukundsinh Solanki (r00td3str0y3r)
|
|
2025-09-16
|
|
HTTP/2 2.0 - Denial Of Service (DOS)
|
198 |
REMOTE
|
Madhusudhan Rajappa
|
|
2025-09-16
|
|
HTMLDOC 1.9.13 - Stack Buffer Overflow
|
182 |
REMOTE
|
wulfgarpro
|
|
2025-08-26
|
|
GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)
|
276 |
REMOTE
|
Giorgi Dograshvili
|
|
2025-08-26
|
|
Ivanti Endpoint Manager Mobile 12.5.0.0 - Authentication Bypass
|
150 |
REMOTE
|
İbrahimsql
|
|
2025-08-18
|
|
Tenda AC20 16.03.08.12 - Command Injection
|
215 |
REMOTE
|
Byte Reaper
|
|
2025-08-18
|
|
Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure
|
182 |
REMOTE
|
Ruben Enkaoua
|
|
2025-08-18
|
|
PHPMyAdmin 3.0 - Bruteforce Login Bypass
|
228 |
REMOTE
|
Nikola Markovic
|
|
2025-08-11
|
|
Belkin F9K1009 F9K1010 2.00.04/2.00.09 - Hard Coded Credentials
|
107 |
REMOTE
|
Byte Reaper
|
|
2025-08-11
|
|
Microsoft SharePoint Server 2019 (16.0.10383.20020) - Remote Code Execution (RCE)
|
108 |
REMOTE
|
Agampreet Singh
|
|
2025-08-11
|
|
Tigo Energy Cloud Connect Advanced (CCA) 4.0.1 - Command Injection
|
62 |
REMOTE
|
Byte Reaper
|
|
2025-08-11
|
|
Citrix NetScaler ADC/Gateway 14.1 - Memory Disclosure
|
60 |
REMOTE
|
Yesith Alvarez
|
|
2025-08-11
|
|
Cisco ISE 3.0 - Authorization Bypass
|
98 |
REMOTE
|
İbrahimsql
|
|
2025-08-11
|
|
Cisco ISE 3.0 - Remote Code Execution (RCE)
|
112 |
REMOTE
|
İbrahimsql
|
|
2025-08-03
|
|
Swagger UI 1.0.3 - Cross-Site Scripting (XSS)
|
82 |
REMOTE
|
Byte Reaper
|
|
2025-08-03
|
|
Microsoft Edge (Chromium-based) 135.0.7049.114/.115 - Information Disclosure
|
67 |
REMOTE
|
nu11secur1ty
|
|
2025-07-22
|
|
Tenda FH451 1.0.0.9 Router - Stack-based Buffer Overflow
|
54 |
REMOTE
|
Byte Reaper
|
|
2025-07-22
|
|
Microsoft Edge Windows 10 Version 1511 - Cross Site Scripting (XSS)
|
52 |
REMOTE
|
nu11secur1ty
|
|
2025-07-16
|
|
NodeJS 24.x - Path Traversal
|
142 |
REMOTE
|
Abdualhadi khalifa
|
|
2025-07-16
|
|
MikroTik RouterOS 7.19.1 - Reflected XSS
|
103 |
REMOTE
|
Prak Sokchea
|
|
2025-07-16
|
|
Keras 2.15 - Remote Code Execution (RCE)
|
133 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-07-08
|
|
Microsoft Outlook - Remote Code Execution (RCE)
|
192 |
REMOTE
|
nu11secur1ty
|
|
2025-07-08
|
|
ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
|
137 |
REMOTE
|
Alexandre ZANNI
|
|
2025-07-08
|
|
Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
|
94 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-07-02
|
|
Microsoft SharePoint 2019 - NTLM Authentication
|
107 |
REMOTE
|
nu11secur1ty
|
|
2025-07-02
|
|
gogs 0.13.0 - Remote Code Execution (RCE)
|
151 |
REMOTE
|
cybersploit
|
|
2025-07-02
|
|
Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
|
156 |
REMOTE
|
4m3rr0r
|
|
2025-06-26
|
|
McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
|
141 |
REMOTE
|
Keenan Scott
|
|
2025-06-26
|
|
Microsoft Excel 2024 Use after free - Remote Code Execution (RCE)
|
131 |
REMOTE
|
nu11secur1ty
|
|
2025-06-26
|
|
freeSSHd 1.0.9 - Denial of Service (DoS)
|
87 |
REMOTE
|
Fernando Mengali
|
|
2025-06-26
|
|
OneTrust SDK 6.33.0 - Denial Of Service (DoS)
|
71 |
REMOTE
|
Alameen Karim Merali
|
|
2025-06-26
|
|
PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
|
80 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-06-20
|
|
Ingress-NGINX 4.11.0 - Remote Code Execution (RCE)
|
136 |
REMOTE
|
Likhith Appalaneni
|
|
2025-06-20
|
|
FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse
|
97 |
REMOTE
|
Shahid Hakim
|
|
2025-06-15
|
|
WebDAV Windows 10 - Remote Code Execution (RCE)
|
124 |
REMOTE
|
Dev Bui Hieu
|
|
2025-06-15
|
|
AirKeyboard iOS App 1.0.5 - Remote Input Injection
|
81 |
REMOTE
|
Chokri Hammedi
|
|
2025-06-15
|
|
Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE)
|
134 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-06-15
|
|
PCMan FTP Server 2.0.7 - Buffer Overflow
|
71 |
REMOTE
|
Fernando Mengali
|
|
2025-06-13
|
|
Windows File Explorer Windows 10 Pro x64 - TAR Extraction
|
89 |
REMOTE
|
Daniel Miranda
|
|
2025-06-13
|
|
Freefloat FTP Server 1.0 - Remote Buffer Overflow
|
76 |
REMOTE
|
Fernando Mengali
|
|
2025-06-09
|
|
ProSSHD 1.2 20090726 - Denial of Service (DoS)
|
76 |
REMOTE
|
Fernando Mengali
|
|
2025-06-05
|
|
Apache Tomcat 10.1.39 - Denial of Service (DoS)
|
104 |
REMOTE
|
Abdualhadi khalifa
|
|
2025-06-05
|
|
ABB Cylon Aspect 3.08.04 DeploySource - Remote Code Execution (RCE)
|
75 |
REMOTE
|
LiquidWorm
|
|
2025-06-05
|
|
Microsoft Windows Server 2025 JScript Engine - Remote Code Execution (RCE)
|
103 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-06-05
|
|
Grandstream GSD3710 1.0.11.13 - Stack Overflow
|
65 |
REMOTE
|
Pepelux
|
|
2025-05-29
|
|
SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal
|
80 |
REMOTE
|
İbrahimsql
|
|
2025-05-29
|
|
Windows File Explorer Windows 11 (23H2) - NTLM Hash Disclosure
|
72 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-05-29
|
|
Automic Agent 24.3.0 HF4 - Privilege Escalation
|
67 |
REMOTE
|
Flora Schäfer
|
|
2025-05-29
|
|
Fortra GoAnywhere MFT 7.4.1 - Authentication Bypass
|
64 |
REMOTE
|
İbrahimsql
|
|
2025-05-25
|
|
ABB Cylon Aspect 3.08.03 - Guest2Root Privilege Escalation
|
68 |
REMOTE
|
LiquidWorm
|
|
2025-05-25
|
|
Grandstream GSD3710 1.0.11.13 - Stack Buffer Overflow
|
70 |
REMOTE
|
Pepelux
|
|
2025-05-25
|
|
Windows 2024.15 - Unauthenticated Desktop Screenshot Capture
|
81 |
REMOTE
|
Chokri Hammedi
|
|
2025-05-21
|
|
Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)
|
121 |
REMOTE
|
Chokri Hammedi
|
|
2025-05-18
|
|
CrushFTP 11.3.1 - Authentication Bypass
|
128 |
REMOTE
|
İbrahimsql
|
|
2025-05-18
|
|
Invision Community 5.0.6 - Remote Code Execution (RCE)
|
126 |
REMOTE
|
Egidio Romano
|
|
2025-05-09
|
|
Apache ActiveMQ 6.1.6 - Denial of Service (DOS)
|
103 |
REMOTE
|
Abdualhadi khalifa
|
|
2025-04-22
|
|
Firefox ESR 115.11 - PDF.js Arbitrary JavaScript execution
|
50 |
REMOTE
|
Milad karimi
|
|
2025-04-22
|
|
code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)
|
85 |
REMOTE
|
Pruthu Raut
|
|
2025-04-22
|
|
WonderCMS 3.4.2 - Remote Code Execution (RCE)
|
67 |
REMOTE
|
Milad karimi
|
|
2025-04-22
|
|
OpenSSH server (sshd) 9.8p1 - Race Condition
|
71 |
REMOTE
|
Milad karimi
|
|
2025-04-18
|
|
Langflow 1.3.0 - Remote Code Execution (RCE)
|
59 |
REMOTE
|
VeryLazyTech
|
|
2025-04-17
|
|
TP-Link VN020 F3v(T) TT_V6.2.1021 - Denial Of Service (DOS)
|
47 |
REMOTE
|
Mohamed Maatallah
|
|
2025-04-17
|
|
TP-Link VN020 F3v(T) TT_V6.2.1021 - Buffer Overflow Memory Corruption
|
53 |
REMOTE
|
Mohamed Maatallah
|
|
2025-04-16
|
|
Dell EMC iDRAC7/iDRAC8 2.52.52.52 - Remote Code Execution (RCE)
|
85 |
REMOTE
|
Photubias
|
|
2025-04-16
|
|
Fortinet FortiOS_ FortiProxy_ and FortiSwitchManager 7.2.0 - Authentication bypass
|
62 |
REMOTE
|
ub3rsick
|
|
2025-04-16
|
|
WebMethods Integration Server 10.15.0.0000-0092 - Improper Access on Login Page
|
50 |
REMOTE
|
Rasime Ekici
|
|
2025-04-16
|
|
Hugging Face Transformers MobileViTV2 4.41.1 - Remote Code Execution (RCE)
|
69 |
REMOTE
|
The Kernel Panic
|
|
2025-04-15
|
|
Ivanti Connect Secure 22.7R2.5 - Remote Code Execution (RCE)
|
67 |
REMOTE
|
Abdualhadi khalifa
|
|
2025-04-15
|
|
Pymatgen 2024.1 - Remote Code Execution (RCE)
|
67 |
REMOTE
|
Mohammed Idrees Banyamer
|
|
2025-04-14
|
|
GestioIP 3.5.7 - Remote Command Execution (RCE)
|
75 |
REMOTE
|
Maximiliano Belino
|
|
2025-04-14
|
|
GestioIP 3.5.7 - Cross-Site Scripting (XSS)
|
53 |
REMOTE
|
Maximiliano Belino
|
|
2025-04-14
|
|
GestioIP 3.5.7 - Reflected Cross-Site Scripting (Reflected XSS)
|
53 |
REMOTE
|
Maximiliano Belino
|
|
2025-04-14
|
|
GestioIP 3.5.7 - Stored Cross-Site Scripting (Stored XSS)
|
51 |
REMOTE
|
Maximiliano Belino
|
|
2025-04-14
|
|
GestioIP 3.5.7 - Cross-Site Request Forgery (CSRF)
|
49 |
REMOTE
|
Maximiliano Belino
|
|
2025-04-10
|
|
K7 Ultimate Security K7RKScan.sys 17.0.2019 - Denial Of Service (DoS)
|
49 |
REMOTE
|
M. Akil Gündoğan
|
|
2025-04-08
|
|
Sony XAV-AX5500 1.13 - Firmware Update Validation Remote Code Execution (RCE)
|
67 |
REMOTE
|
lkushinada
|
|
2025-04-08
|
|
InfluxDB OSS 2.7.11 - Operator Token Privilege Escalation
|
47 |
REMOTE
|
Andrea Pasin
|
|
2025-04-05
|
|
Microchip TimeProvider 4100 Grandmaster (Data plot modules) 2.4.6 - SQL Injection
|
48 |
REMOTE
|
Armando Huesca Prida
|
|
2025-04-04
|
|
Angular-Base64-Upload Library 0.1.20 - Remote Code Execution (RCE)
|
48 |
REMOTE
|
Ravindu Wickramasinghe
|
|
2025-04-04
|
|
Microchip TimeProvider 4100 Grandmaster (Banner Config Modules) 2.4.6 - Stored Cross-Site Scripting
|
49 |
REMOTE
|
Armando Huesca Prida
|
|
2025-04-04
|
|
Microchip TimeProvider 4100 (Configuration modules) 2.4.6 - OS Command Injection
|
51 |
REMOTE
|
Armando Huesca Prida
|
|
2025-04-03
|
|
Microsoft Office 2019 MSO Build 1808 - NTLMv2 Hash Disclosure
|
60 |
REMOTE
|
Metin Yunus Kandemir
|
|
2025-04-03
|
|
Vite 6.2.2 - Arbitrary File Read
|
53 |
REMOTE
|
4m3rr0r
|
|
2025-04-02
|
|
SAP NetWeaver - 7.53 - HTTP Request Smuggling
|
47 |
REMOTE
|
C41Tx90
|
|
2025-03-22
|
|
Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)
|
61 |
REMOTE
|
Amir Hossein Jamshidi
|
|
2025-03-22
|
|
Microsoft Windows - NTLM Hash Leak Malicious Windows Theme
|
48 |
REMOTE
|
Abinesh kamal K U
|
|
2024-05-13
|
|
CrushFTP < 11.1.0 - Directory Traversal
|
55 |
REMOTE
|
Abdualhadi khalifa
|
|
2024-04-21
|
|
Palo Alto PAN-OS < v11.1.2-h3 - Command Injection and Arbitrary File Creation
|
51 |
REMOTE
|
Kr0ff
|
|
2024-04-12
|
|
MinIO < 2024-01-31T20-20-33Z - Privilege Escalation
|
58 |
REMOTE
|
Jenson Zhao
|
|
2024-04-08
|
|
Positron Broadcast Signal Processor TRA7005 v1.20 - Authentication Bypass
|
49 |
REMOTE
|
LiquidWorm
|
|
2024-04-02
|
|
GL-iNet MT6000 4.5.5 - Arbitrary File Download
|
56 |
REMOTE
|
Bandar Alharbi
|
|
2024-03-28
|
|
WinRAR version 6.22 - Remote Code Execution via ZIP archive
|
65 |
REMOTE
|
E1 Coders
|
|
2024-03-28
|
|
Siklu MultiHaul TG series < 2.0.0 - unauthenticated credential disclosure
|
155 |
REMOTE
|
semaja2
|
|
2024-03-28
|
|
Asterisk AMI - Partial File Content & Path Disclosure (Authenticated)
|
73 |
REMOTE
|
Sean Pesce
|
|
2024-03-25
|
|
LBT-T300-mini1 - Remote Buffer Overflow
|
56 |
REMOTE
|
Amirhossein Bahramizadeh
|
|
2024-03-22
|
|
minaliC 2.0.0 - Denied of Service
|
62 |
REMOTE
|
Fernando Mengali
|
|
2024-03-20
|
|
HNAS SMU 14.8.7825 - Information Disclosure
|
48 |
REMOTE
|
Arslan Masood
|
|
2024-03-18
|
|
TELSAT marKoni FM Transmitter 1.9.5 - Insecure Access Control Change Password
|
55 |
REMOTE
|
LiquidWorm
|
|
2024-03-18
|
|
TELSAT marKoni FM Transmitter 1.9.5 - Backdoor Account Information Disclosure
|
52 |
REMOTE
|
LiquidWorm
|
|
2024-03-18
|
|
TELSAT marKoni FM Transmitter 1.9.5 - Root Command Injection
|
58 |
REMOTE
|
LiquidWorm
|
|
2024-03-14
|
|
GitLab CE/EE < 16.7.2 - Password Reset
|
49 |
REMOTE
|
0xB455
|
|
2024-03-14
|
|
Ruijie Switch PSG-5124 26293 - Remote Code Execution (RCE)
|
54 |
REMOTE
|
ByteHunter
|
|
2024-03-14
|
|
Viessmann Vitogate 300 2.1.3.0 - Remote Code Execution (RCE)
|
60 |
REMOTE
|
ByteHunter
|
|
2024-03-14
|
|
SolarView Compact 6.00 - Command Injection
|
41 |
REMOTE
|
ByteHunter
|
