Search Vulnerabilities

Fastjson before 1

Sony BRAVIA Digital Signage 1.7.8 Unauthenticated Remote File Inclusion

FIBARO System Home Center 5.021 Remote File Inclusion via Proxy API

theshit vulnerable to unsafe loading of user-owned Python rules when running as root.

The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via the subdomain parame...

In JetBrains TeamCity before 2025

NXLog Agent before 6

n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook

The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49

FACTION Unauthenticated Custom Extension Upload leads to RCE

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted...

A vulnerability has been identified in Spectrum Power 4 (All versions < V4

Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events

Scripts for the module Global_Shipping executable on BRAIN2 Server

n8n Vulnerable to Remote Code Execution via Git Node Pre-Commit Hook

Local File Inclusion in ArkSigner's AcBakImzala

An arbitrary code execution vulnerability exists in the git functionality of Truffle Security Co

HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.

Ankitects Anki before 25

IBM Security Verify Access code execution