exploits-db.com

500 / 500 records · showing 50

1. CVE-2026-16940The flaw allows unauthenticated users to delete arbitrary files, leading to potential full site takeover.10 CRITICAL · pub. 2026-08-05 · —
2. CVE-2026-71268The flaw allows attackers to execute arbitrary code by manipulating file paths in uploaded Structured Text files, due to lack of proper validation.9.9 CRITICAL · pub. 2026-08-05 · — · public exploit
3. CVE-2026-10090The flaw allows a user with namespace-scoped 'edit' privileges to create Subscription resources that can escalate their privileges to full cluster-admin access, bypassing intended security controls.9.9 CRITICAL · pub. 2026-08-05 · —
4. CVE-2026-71289The flaw allows direct access to the amp-manager REST API without going through the CAM gateway, enabling unauthorized access and potential full system compromise.9.8 CRITICAL · pub. 2026-08-05 · — · public exploit
5. CVE-2026-71278The flaw allows creating a 'calc rule' without authentication, enabling unauthorized access and potential manipulation of critical data.9.8 CRITICAL · pub. 2026-08-05 · — · public exploit
6. CVE-2026-71267The flaw allows an attacker to overwrite critical data on the stack by supplying a long entry name, potentially leading to remote code execution.9.8 CRITICAL · pub. 2026-08-05 · — · public exploit
7. CVE-2026-71262The IoTSharp BlobStorageController.cs lacks proper authorization, allowing unauthenticated attackers to access sensitive storage operations such as upload, download, list, modify, and delete.9.8 CRITICAL · pub. 2026-08-05 · — · public exploit
8. CVE-2026-71256The flaw involves an out-of-bounds stack read in nanoMODBUS v1.23.0, allowing a wild-pointer write that can lead to severe system vulnerabilities.9.8 CRITICAL · pub. 2026-08-05 · — · public exploit
9. CVE-2026-71254The flaw allows an attacker to perform out-of-bounds writes by manipulating Modbus requests, leading to potential code execution or data corruption.9.8 CRITICAL · pub. 2026-08-05 · — · public exploit
10. CVE-2026-71248The flaw is an SQL injection vulnerability due to direct string concatenation in login.php, allowing attackers to bypass authentication by manipulating input parameters.9.8 CRITICAL · pub. 2026-08-05 · — · public exploit
11. CVE-2026-71237The flaw allows unauthenticated attackers to bypass authentication and potentially extract database data through SQL injection.9.8 CRITICAL · pub. 2026-08-05 · — · public exploit
12. CVE-2026-71231The flaw allows an attacker to execute arbitrary SQL commands by exploiting improper input sanitization in the authentication query construction.9.8 CRITICAL · pub. 2026-08-05 · — · public exploit
13. CVE-2026-66747The Zbtlink router firmware includes an embedded implant called ENDLESSDOORS that provides unauthenticated remote code execution as root over cleartext TCP to a hardcoded C2 server.9.8 CRITICAL · pub. 2026-08-05 · — · public exploit
14. CVE-2026-71214The flaw allows an attacker to bypass authentication by manipulating the session_variables object in the request body instead of using the Authorization header's JWT claims.9.8 CRITICAL · pub. 2026-08-05 · — · public exploit
15. CVE-2026-71207The flaw allows direct SQL injection due to unparameterized query construction and hardcoded credentials, enabling unauthorized access.9.8 CRITICAL · pub. 2026-08-05 · — · public exploit
16. CVE-2026-64566The vulnerability in iptfs_skb_add_frags() allows for kernel memory corruption when handling shared frags, leading to potential panic conditions.9.8 CRITICAL · pub. 2026-08-05 · —
17. CVE-2026-61486A stack-based buffer overflow vulnerability exists in Apache Lucy, allowing attackers to potentially execute arbitrary code through crafted input.9.8 CRITICAL · pub. 2026-08-05 · apache
18. CVE-2026-61484The flaw is a deserialization vulnerability in Apache Lucy, allowing untrusted data to be deserialized, which can lead to remote code execution or other severe impacts. This matters because it can enable attackers to exploit the software even though it is no longer supported.9.8 CRITICAL · pub. 2026-08-05 · apache
19. CVE-2026-70554The flaw is a PHP object injection vulnerability in MaxSite CMS that allows unauthenticated attackers to execute arbitrary code by passing malicious serialized data through the maxsite_comuser cookie. This matters because it can lead to full system compromise without authentication.9.8 CRITICAL · pub. 2026-08-04 · — · public exploit
20. CVE-2026-66902This vulnerability allows an attacker to execute arbitrary commands with the privileges of the application process by manipulating external_account credentials JSON.9.8 CRITICAL · pub. 2026-08-04 · — · public exploit
21. CVE-2026-45538The flaw is a stack buffer overflow in OpenSIPS due to unbounded copying of SIP header names into a fixed-size buffer, allowing remote code execution via crafted SIP messages.9.8 CRITICAL · pub. 2026-08-04 · — · public exploit
22. CVE-2026-70553The flaw allows unauthenticated attackers to inject arbitrary PHP code into the application configuration file via crafted POST requests, leading to persistent remote code execution.9.8 CRITICAL · pub. 2026-08-04 · — · public exploit
23. CVE-2026-70552The flaw allows unauthenticated attackers to access admin endpoints by exploiting an authentication bypass in the AJAX dispatcher, enabling unauthorized actions such as manipulating poll states and vote counts.9.8 CRITICAL · pub. 2026-08-04 · — · public exploit
24. CVE-2026-69703The flaw allows unauthenticated attackers to bypass session-based authentication and invoke admin actions, leading to potential unauthorized record deletion.9.8 CRITICAL · pub. 2026-08-04 · — · public exploit
25. CVE-2026-49435The flaw is a stack-based buffer overflow in Keysight IxChariot Endpoint products, allowing unauthenticated remote attackers to execute arbitrary code with administrative privileges by sending specially crafted packets.9.8 CRITICAL · pub. 2026-08-04 · —
26. CVE-2026-0163The flaw involves a use after free vulnerability in vpu_ioctl.c, allowing remote escalation of privilege without user interaction.9.8 CRITICAL · pub. 2026-08-04 · —
27. CVE-2017-20242The flaw is a stack-based buffer overflow in Keysight IxChariot Endpoint versions before 9.5.102, allowing unauthenticated remote attackers to crash the endpoint or execute arbitrary code by sending specially crafted packets.9.8 CRITICAL · pub. 2026-08-04 · —
28. CVE-2017-20241The flaw is a heap-based buffer overflow in Keysight IxChariot Endpoint versions before 9.5.102, allowing unauthenticated remote attackers to crash the endpoint or execute arbitrary code.9.8 CRITICAL · pub. 2026-08-04 · —
29. CVE-2026-24254The vulnerability in NVIDIA Dynamo for Linux allows an attacker to perform out-of-bounds writes, potentially leading to code execution and data tampering.9.8 CRITICAL · pub. 2026-08-04 · nvidia, linux · public exploit
30. CVE-2026-63456The flaw allows unauthenticated attackers to bypass web authentication and access sensitive system functions via the REST API, posing a significant security risk.9.8 CRITICAL · pub. 2026-08-04 · —
31. CVE-2026-63455The flaw allows unauthenticated attackers to bypass web authentication and access sensitive system functions via the REST API, posing a significant security risk.9.8 CRITICAL · pub. 2026-08-04 · —
32. CVE-2025-29296The flaw allows command injection via the /api/esps request handler, enabling remote attackers to execute arbitrary commands as root.9.8 CRITICAL · pub. 2026-08-04 · —
33. CVE-2026-69098The flaw allows unauthenticated attackers to execute arbitrary code by deserializing crafted YAML/JSON input, posing a significant security risk.9.8 CRITICAL · pub. 2026-08-04 · — · public exploit
34. CVE-2026-61515The flaw allows unauthenticated command injection, enabling attackers to execute arbitrary OS commands and gain root-level access.9.8 CRITICAL · pub. 2026-08-04 · —
35. CVE-2026-61514The flaw allows unauthenticated attackers to access device functions by exploiting an authentication bypass vulnerability in Puwell IP Camera firmware versions 2.x through 4.x.9.8 CRITICAL · pub. 2026-08-04 · —
36. CVE-2026-15721The flaw is a cleartext storage of sensitive information and SQL Injection vulnerability in HUMANIST Digital Human Resources versions before 26.1, allowing attackers to access sensitive data through unencrypted storage and execute malicious SQL commands.9.8 CRITICAL · pub. 2026-08-04 · —
37. CVE-2026-14175Allows attackers to upload a web shell by exploiting an unrestricted file upload vulnerability, leading to remote code execution.9.8 CRITICAL · pub. 2026-08-04 · —
38. CVE-2026-64564This vulnerability allows an attacker to free a transport structure and then reuse it, leading to potential denial of service or other critical issues in SCTP associations.9.8 CRITICAL · pub. 2026-08-04 · —
39. CVE-2026-16618The flaw allows unauthenticated users to upload executable PHP files due to improper file validation in the Improve SEO WordPress plugin, leading to remote code execution.9.8 CRITICAL · pub. 2026-08-04 · —
40. CVE-2026-70376The flaw allows attackers to perform CSRF attacks by manipulating the Referer header, bypassing admin panel protections.9.6 CRITICAL · pub. 2026-08-05 · — · public exploit
41. CVE-2026-25289The flaw involves memory corruption when processing Device Capability Extended attributes in specific NAN Service Discovery Frames with invalid length values, potentially leading to remote code execution.9.6 CRITICAL · pub. 2026-08-04 · qualcomm
42. CVE-2026-9273The flaw allows password reset link poisoning, enabling account takeover due to unvalidated POST parameters and a broadcasted nonce.9.3 CRITICAL · pub. 2026-08-05 · —
43. CVE-2026-15958The flaw allows unauthenticated attackers to perform file management actions on connected Dropbox accounts, leading to unauthorized access and data exposure.9.3 CRITICAL · pub. 2026-08-04 · —
44. CVE-2026-71277The flaw allows an attacker to bypass authentication by sending any non-empty Authorization header, granting unauthorized access to protected endpoints.9.1 CRITICAL · pub. 2026-08-05 · — · public exploit
45. CVE-2026-71263The flaw involves an off-by-one error in the bounds check for LINUXTCP port of FreeModbus, leading to potential buffer overflow. This matters because it can allow attackers to exploit the vulnerability to execute malicious code or cause system crashes.9.1 CRITICAL · pub. 2026-08-05 · — · public exploit
46. CVE-2026-71238The flaw involves a hardcoded Django SECRET_KEY in the codebase, allowing attackers to forge session cookies and tokens, leading to full account takeover.9.1 CRITICAL · pub. 2026-08-05 · — · public exploit
47. CVE-2026-44945A privilege escalation vulnerability allows authenticated users to gain full administrative access, bypassing role restrictions.9.1 CRITICAL · pub. 2026-08-05 · — · public exploit
48. CVE-2026-10059The flaw allows a tenant administrator with namespace-scoped privileges to exploit a vulnerability in the Multicluster Engine for Kubernetes ClusterCurator controller, leading to privilege escalation and full control over the cluster.9.1 CRITICAL · pub. 2026-08-05 · —
49. CVE-2026-71213The flaw allows unauthenticated attackers to perform unlimited password-guessing attacks due to lack of rate-limiting or account lockout mechanisms when captcha is disabled by default.9.1 CRITICAL · pub. 2026-08-05 · — · public exploit
50. CVE-2026-5581The flaw allows unauthenticated attackers to delete any media attachment by exploiting missing capability checks and exposed nonce values, potentially leading to complete media library destruction.9.1 CRITICAL · pub. 2026-08-05 · —