Mon, Apr 06 · 04:16 PM CDTCVE-2026-34444
10.0/10 · Must read/watchNVDvuln
Summary
Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is not consistently applied when attributes are accessed through built-in functions like getattr and setattr. This allows an attacker to bypass the intended restrictions and eventually achieve arbitrary code execution.
CVECVE-2026-34444
SeverityCRITICAL
TypeUPDATED
PublishedMon, Apr 06 · 04:16 PM CDT
ModifiedFri, May 01 · 07:54 PM CDT
CVE-2022-45047
9.8/10 · Must read/watchNVDvuln
Summary
Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.
CVECVE-2022-45047
SeverityCRITICAL
TypeUPDATED
PublishedWed, Nov 16 · 09:15 AM CST
ModifiedFri, May 01 · 04:16 PM CDT
CVE-2026-26015
9.8/10 · Must read/watchNVDvuln
Summary
DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.16.0, an attacker accessing both the official DocsGPT website or any local and public deployment, can craft a malicious payload bypassing the "MCP test" behavior to achieve arbitrary remote code execution (RCE). This issue has been
CVECVE-2026-26015
SeverityCRITICAL
TypeUPDATED
PublishedWed, Apr 29 · 06:16 PM CDT
ModifiedFri, May 01 · 12:56 PM CDT
CVE-2026-40504
9.8/10 · Must read/watchNVDvuln
Summary
Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec function that allows attackers to write out-of-bounds memory by crafting scripts with many string literals at global scope. Attackers can exploit insufficient bounds checking in gravity_fiber_reassign() to corrupt heap me
CVECVE-2026-40504
SeverityCRITICAL
TypeUPDATED
PublishedThu, Apr 16 · 02:16 AM CDT
ModifiedFri, May 01 · 02:41 PM CDT
CVE-2026-7321
9.6/10 · Must read/watchNVDvuln
Summary
Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, and Thunderbird 140.10.1.
CVECVE-2026-7321
SeverityCRITICAL
TypeUPDATED
PublishedTue, Apr 28 · 03:16 PM CDT
ModifiedFri, May 01 · 05:54 PM CDT
CVE-2025-54236
9.1/10 · Must read/watchNVDvuln
Summary
Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue doe
CVECVE-2025-54236
SeverityCRITICAL
TypeUPDATED
PublishedTue, Sep 09 · 02:15 PM CDT
ModifiedWed, Apr 22 · 07:00 PM CDT
CVE-2026-23500
9.1/10 · Must read/watchNVDvuln
Summary
Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions prior to 23.0.0 , the ODT to PDF conversion process in odf.php concatenates the MAIN_ODT_AS_PDF configuration constant directly into a shell command passed to exec() without sanitization. An authen
CVECVE-2026-23500
SeverityCRITICAL
TypeUPDATED
PublishedFri, Apr 17 · 09:16 PM CDT
ModifiedFri, May 01 · 06:28 PM CDT
CVE-2026-40903
9.1/10 · Must read/watchNVDvuln
Summary
goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.6, goshs has an ArtiPACKED vulnerability. ArtiPACKED can lead to leakage of the GITHUB_TOKEN through workflow artifacts, even though the token is not present in the repository source code. This vulnerability is fixed in 2.0.0-beta.6.
CVECVE-2026-40903
SeverityCRITICAL
TypeUPDATED
PublishedTue, Apr 21 · 08:17 PM CDT
ModifiedFri, May 01 · 04:15 PM CDT
CVE-2026-41386
9.1/10 · Must read/watchNVDvuln
Summary
OpenClaw before 2026.3.22 contains a privilege escalation vulnerability where bootstrap setup codes are not bound to intended device roles and scopes during pairing. Attackers can exploit this during first-use device pairing to escalate privileges beyond their intended role and scope.
CVECVE-2026-41386
SeverityCRITICAL
TypeUPDATED
PublishedTue, Apr 28 · 07:37 PM CDT
ModifiedFri, May 01 · 03:52 PM CDT
CVE-2025-67030
8.8/10 · Worth your timeNVDvuln
Summary
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
CVECVE-2025-67030
SeverityHIGH
TypeUPDATED
PublishedWed, Mar 25 · 06:16 PM CDT
ModifiedFri, May 01 · 05:12 PM CDT
CVE-2026-29955
8.8/10 · Worth your timeNVDvuln
Summary
The `/registercrd` endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection. The component uses `subprocess.Popen()` with `shell=True` parameter to execute shell commands, and the user-supplied `chartName` parameter is directly concatenated into the command string without any sa
CVECVE-2026-29955
SeverityHIGH
TypeUPDATED
PublishedMon, Apr 13 · 07:16 PM CDT
ModifiedFri, May 01 · 03:04 PM CDT
CVE-2026-39911
8.8/10 · Worth your timeNVDvuln
Summary
Hashgraph Guardian through version 3.5.1, fixed in commit 45fbe2f, contains an unsandboxed JavaScript execution vulnerability in the Custom Logic policy block worker that allows authenticated Standard Registry users to execute arbitrary code by passing user-supplied JavaScript expressions directly to the Node.js Functi
CVECVE-2026-39911
SeverityHIGH
TypeUPDATED
PublishedThu, Apr 09 · 06:17 PM CDT
ModifiedFri, May 01 · 05:16 PM CDT
CVE-2026-41378
8.8/10 · Worth your timeNVDvuln
Summary
OpenClaw before 2026.3.31 contains a privilege escalation vulnerability allowing paired nodes with role=node to dispatch node.event agent requests with unrestricted gateway-side tool access. Attackers with trusted paired node credentials can escalate privileges by leveraging unrestricted agent.request dispatch to achie
CVECVE-2026-41378
SeverityHIGH
TypeUPDATED
PublishedTue, Apr 28 · 07:37 PM CDT
ModifiedFri, May 01 · 03:51 PM CDT
CVE-2026-32857
8.6/10 · Worth your timeNVDvuln
Summary
Firecrawl version 2.8.0 and prior contain a server-side request forgery (SSRF) protection bypass vulnerability in the Playwright scraping service where network policy validation is applied only to the initial user-supplied URL and not to subsequent redirect destinations. Attackers can supply an externally valid URL tha
CVECVE-2026-32857
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 26 · 06:16 PM CDT
ModifiedFri, May 01 · 03:21 PM CDT
CVE-2026-21997
8.5/10 · Worth your timeNVDvuln
Summary
Vulnerability in the Oracle Life Sciences Empirica Signal product of Oracle Life Science Applications (component: Common Core). Supported versions that are affected are 9.2.1-9.2.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Life Sciences Empirica S
CVECVE-2026-21997
SeverityHIGH
TypeUPDATED
PublishedTue, Apr 21 · 09:16 PM CDT
ModifiedFri, May 01 · 01:30 PM CDT
CVE-2016-20037
8.4/10 · Worth your timeNVDvuln
Summary
xwpe 1.5.30a-2.1 and prior contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying overly long input strings that exceed buffer boundaries. Attackers can craft malicious command-line arguments with 262 bytes of junk data followed by shellcode to overwrite
CVECVE-2016-20037
SeverityHIGH
TypeUPDATED
PublishedSat, Mar 28 · 12:15 PM CDT
ModifiedFri, May 01 · 03:21 PM CDT
CVE-2016-20038
8.4/10 · Worth your timeNVDvuln
Summary
yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an excessively long argument to the application. Attackers can craft a malicious command-line argument containing shellcode and a return address to overwrite the stack and execute code
CVECVE-2016-20038
SeverityHIGH
TypeUPDATED
PublishedSat, Mar 28 · 12:15 PM CDT
ModifiedFri, May 01 · 03:21 PM CDT
CVE-2016-20040
8.4/10 · Worth your timeNVDvuln
Summary
TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized ROM parameter to the tiemu command-line interface to overflow the stack buffer and overwrite the instruction po
CVECVE-2016-20040
SeverityHIGH
TypeUPDATED
PublishedSat, Mar 28 · 12:15 PM CDT
ModifiedFri, May 01 · 03:21 PM CDT
CVE-2016-20041
8.4/10 · Worth your timeNVDvuln
Summary
Yasr 0.6.9-5 contains a buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized argument to the -p parameter. Attackers can invoke yasr with a crafted payload containing junk data, shellcode, and a return address to overwrite the stack and t
CVECVE-2016-20041
SeverityHIGH
TypeUPDATED
PublishedSat, Mar 28 · 12:15 PM CDT
ModifiedFri, May 01 · 03:21 PM CDT
CVE-2016-20042
8.4/10 · Worth your timeNVDvuln
Summary
TRN 3.6-23 contains a stack buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the application. Attackers can craft a malicious command-line argument with 156 bytes of padding followed by a return address to overwrite the instruction pointer and exe
CVECVE-2016-20042
SeverityHIGH
TypeUPDATED
PublishedSat, Mar 28 · 12:16 PM CDT
ModifiedFri, May 01 · 03:21 PM CDT
CVE-2016-20046
8.4/10 · Worth your timeNVDvuln
Summary
zFTP Client 20061220+dfsg3-4.1 contains a buffer overflow vulnerability in the NAME parameter handling of FTP connections that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized NAME value exceeding the 80-byte buffer allocated in strcpy_chk to overwrite the ins
CVECVE-2016-20046
SeverityHIGH
TypeUPDATED
PublishedSat, Mar 28 · 12:16 PM CDT
ModifiedFri, May 01 · 03:21 PM CDT
CVE-2016-20048
8.4/10 · Worth your timeNVDvuln
Summary
iSelect 1.4.0-2+b1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized value to the -k/--key parameter. Attackers can craft a malicious argument containing a NOP sled, shellcode, and return address to overflow a 1024-byte stack buffer and gain c
CVECVE-2016-20048
SeverityHIGH
TypeUPDATED
PublishedSat, Mar 28 · 12:16 PM CDT
ModifiedFri, May 01 · 03:21 PM CDT
CVE-2017-20226
8.4/10 · Worth your timeNVDvuln
Summary
Mapscrn 2.0.3 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized input buffer. Attackers can craft a malicious buffer with junk data, return address, NOP instructions, and shellcode to overflow the stack and achieve code execution or deni
CVECVE-2017-20226
SeverityHIGH
TypeUPDATED
PublishedSat, Mar 28 · 12:16 PM CDT
ModifiedFri, May 01 · 02:41 PM CDT
CVE-2018-25213
8.4/10 · Worth your timeNVDvuln
Summary
Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query field to achieve code exe
CVECVE-2018-25213
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 26 · 02:16 PM CDT
ModifiedFri, May 01 · 08:58 PM CDT
CVE-2018-25222
8.4/10 · Worth your timeNVDvuln
Summary
SC v7.16 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying oversized input that exceeds buffer boundaries. Attackers can craft malicious input strings exceeding 1052 bytes to overwrite the instruction pointer and execute shellcode in the application
CVECVE-2018-25222
SeverityHIGH
TypeUPDATED
PublishedSat, Mar 28 · 12:16 PM CDT
ModifiedFri, May 01 · 02:41 PM CDT
