896 vulnerabilidades · General · ⚡ Nuclei Orden: CVSS EPSS Año ID
CVE-2025-22952
Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
24.9%
2025 0 PoCs

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks.

Scanner Automatizado
nuclei -t CVE-2025-22952.yaml ⎘
Exploits & PoCs
🔍 GCVE ⚔ EDB
CVE-2025-2746
🔥 KEV Xperience General ⚡ nuclei
9.8
CRITICAL
EPSS
89.7%
2025 CWE-288 2 PoCs

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.172.

Scanner Automatizado
nuclei -t CVE-2025-2746.yaml ⎘
CVE-2025-56819
Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
11.8%
2025 1 PoC

An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.

Scanner Automatizado
nuclei -t CVE-2025-56819.yaml ⎘
CVE-2025-27007
OttoKit General ⚡ nuclei
9.8
CRITICAL
EPSS
81.5%
2025 CWE-266 1 PoC

Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through <= 1.0.82.

Scanner Automatizado
nuclei -t CVE-2025-27007.yaml ⎘
CVE-2025-47646
PSW Front-end Login & Registration General ⚡ nuclei
9.8
CRITICAL
EPSS
8.9%
2025 CWE-640 2 PoCs

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login & Registration psw-login-and-registration allows Password Recovery Exploitation.This issue affects PSW Front-end Login & Registration: from n/a through <= 1.13.

Scanner Automatizado
nuclei -t CVE-2025-47646.yaml ⎘
CVE-2025-47539
Eventin General ⚡ nuclei
9.8
CRITICAL
EPSS
27.9%
2025 CWE-266 1 PoC

Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects Eventin: from n/a through <= 4.0.26.

Scanner Automatizado
nuclei -t CVE-2025-47539.yaml ⎘
CVE-2020-7796
🔥 KEV Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
92.7%
2020 0 PoCs

Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.

Scanner Automatizado
nuclei -t CVE-2020-7796.yaml ⎘
Exploits & PoCs
🔍 GCVE ⚔ EDB
CVE-2020-3952
🔥 KEV VMware vCenter Server General ⚡ nuclei
9.8
CRITICAL
EPSS
94.3%
2020 6 PoCs

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller (PSC), does not correctly implement access controls.

Scanner Automatizado
nuclei -t CVE-2020-3952.yaml ⎘
CVE-2020-10987
🔥 KEV Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
93.7%
2020 1 PoC

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.

Scanner Automatizado
nuclei -t CVE-2020-10987.yaml ⎘
CVE-2020-15415
🔥 KEV Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
93.0%
2020 0 PoCs

On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharacters in a filename when the text/x-python-script content type is used, a different issue than CVE-2020-14472.

Scanner Automatizado
nuclei -t CVE-2020-15415.yaml ⎘
Exploits & PoCs
🔍 GCVE ⚔ EDB
CVE-2020-26919
🔥 KEV Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
93.8%
2020 1 PoC

NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.

Scanner Automatizado
nuclei -t CVE-2020-26919.yaml ⎘
CVE-2020-8644
🔥 KEV Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
94.1%
2020 3 PoCs

PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

Scanner Automatizado
nuclei -t CVE-2020-8644.yaml ⎘
CVE-2020-15505
🔥 KEV Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
94.4%
2020 2 PoCs

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors.

Scanner Automatizado
nuclei -t CVE-2020-15505.yaml ⎘
CVE-2020-8515
🔥 KEV Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
94.3%
2020 6 PoCs

DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacters to the cgi-bin/mainfunction.cgi URI. This issue has been fixed in Vigor3900/2960/300B v1.5.1.

Scanner Automatizado
nuclei -t CVE-2020-8515.yaml ⎘
CVE-2020-25506
🔥 KEV Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
94.3%
2020 1 PoC

D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.

Scanner Automatizado
nuclei -t CVE-2020-25506.yaml ⎘
CVE-2020-9548
Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
18.9%
2020 7 PoCs

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).

Scanner Automatizado
nuclei -t CVE-2020-9548.yaml ⎘
CVE-2020-5847
🔥 KEV Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
93.4%
2020 3 PoCs

Unraid through 6.8.0 allows Remote Code Execution.

Scanner Automatizado
nuclei -t CVE-2020-5847.yaml ⎘
CVE-2020-10189
🔥 KEV Software Genérico General ⚡ nuclei
9.8
CRITICAL
EPSS
94.2%
2020 6 PoCs

Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is related to the CewolfServlet and MDMLogUploaderServlet servlets.

Scanner Automatizado
nuclei -t CVE-2020-10189.yaml ⎘