Search Vulnerabilities

H3C Magic NX15 RPC esps write code injection

H3C Magic NX15 usrlist sub_416874 os command injection

Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

Pillow: Heap buffer overflow in ImagingJpegDecode

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

Grav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@

Grav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass

Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via Mutations

Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend

CCC Attestation SIG attested-tls-poc through commit 731ca82 Attestation Relay Attack

Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code

Mercury: Unauthenticated Remote Code Execution via /api/kernels

Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass

Camunda Expression Injection via orQueries RCE

FlyCms through commit edfdf724 Default Super Administrator Credentials

CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules

Red Hat Security Advisory: RHTAS 1.4.4 - Release of Model Transparency 1.0.5

Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)