Missing Authorization check in Remote Function Call (RFC) in SAP NetWeaver Application Server ABAP

SAP NetWeaver Application Server ABAP SAP_SE

Privileged Remote Access Authentication Bypass

Privileged Remote Access BeyondTrust

Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)

Jupiter X Core artbees

Luxion KeyShot Viewer KSP File Parsing Memory Corruption Remote Code Execution Vulnerability

KeyShot Viewer Luxion

Authenticated Remote Code Execution via ScriptVar

bestinformed Web Cordaware

ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution

ShowDoc ShowDoc

SMA: Sunny Portal Remote Code Execution

www.sunnyportal.com SMA

Remote Code Execution in DocsGPT

DocsGPT Arc53

PDF-XChange Editor AcroForm Use-After-Free Remote Code Execution Vulnerability

PDF-XChange Editor PDF-XChange

PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor PDF-XChange

PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

PDF-XChange Editor PDF-XChange

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

PDF-XChange Editor PDF-XChange

On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be logged or accounted on the local EOS device or possibly

EOS Arista Networks

WP Import – Ultimate CSV XML Importer for WordPress 7.20 - 7.28 - Authenticated (Subscriber+) Remote Code Execution via Code Injection

WP Import – Ultimate CSV XML Importer for WordPress smackcoders

Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI

Advanced Views – Display Posts, Custom Fields, and More wplakeorg

Missing Certificate Validation in CleverControl Installer Allows Remote Code Execution

CleverControl employee monitoring software CleverControl

CosmodiumCS OnlyRAT Configuration File main.py remote_download os command injection

OnlyRAT CosmodiumCS

huggingface LeRobot ZeroMQ Socket lekiwi_remote.py missing authentication

LeRobot huggingface

Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution

WSO2 API Manager WSO2

GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

GIMP GIMP

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP GIMP

GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP GIMP

GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP GIMP

GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP GIMP

GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

GIMP GIMP

GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP GIMP

Remote Code Execution in MarkAny SafePC Enterprise

SafePC Enterprise MarkAny

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow MLflow

win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability

win-cli-mcp-server win-cli-mcp-server

Remote Code Execution in GTONE ChangeFlow

ChangeFlow GTONE

Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability

Cobalt Ashlar-Vellum

Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Cobalt Ashlar-Vellum

Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability

Cobalt Ashlar-Vellum

UTT 进取 518G formRemoteControl sub_4247AC buffer overflow

进取 518G UTT

Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests

Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability

Era 300 Sonos

Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.28 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder bdthemes

Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting

Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder bdthemes

Remote Code Execution in PlotAI

PlotAI MLJAR

PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability

PostHog PostHog

End-of-Train and Head-of-Train Remote Linking Protocol Weak Authentication

End-of-Train and Head-of-Train remote linking protocol End-of-Train and Head-of-Train remote linking protocol

Authenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code Execution

WSO2 Enterprise Integrator WSO2

Remote Code Execution via Unrestricted File Upload in Ready_

Ready_ Symfonia

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Authentication Targeted Denial of Service Vulnerability

Cisco Adaptive Security Appliance (ASA) Software Cisco

Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise

Splunk Enterprise Splunk

Cisco Webex App Client-Side Remote Code Execution Vulnerability

Cisco Webex Teams Cisco

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

Cisco Adaptive Security Appliance (ASA) Software Cisco

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability

Cisco Adaptive Security Appliance (ASA) Software Cisco

Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability

Cisco Firepower Management Center Cisco

Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability

Cisco Firepower Threat Defense Software Cisco