Skip to main content
CVE-2021-36548 Oct 28, 20:15 CRITICAL POC Act Now

A remote code execution (RCE) vulnerability in the component /admin/index.php?id=themes&action=edit_template&filename=blog of Monstra v3.0.4 allows attackers to execute arbitrary commands via a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE File Upload Monstra
NVD GitHub
CVSS 3.1
9.8
EPSS
3.2%
CVE-2021-36547 Oct 28, 20:15 CRITICAL POC Act Now

A remote code execution (RCE) vulnerability in the component /codebase/dir.php?type=filenew of Mara v7.5 allows attackers to execute arbitrary commands via a crafted PHP file. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE File Upload Mara Cms Mara Cms Project
NVD GitHub
CVSS 3.1
9.8
EPSS
3.2%
CVE-2021-41194 Oct 28, 20:15 CRITICAL PATCH Act Now

FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Jupyterhub First Use Authenticator
NVD GitHub
CVSS 3.1
9.8
EPSS
1.3%
CVE-2021-3823 Oct 28, 14:15 CRITICAL Act Now

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Path Traversal Gravityzone Bitdefender
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2021-37002 Oct 28, 13:15 CRITICAL Act Now

There is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to be executed. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Emui Huawei Magic Ui
NVD
CVSS 3.1
9.8
EPSS
0.7%
CVE-2021-36990 Oct 28, 13:15 CRITICAL Act Now

There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Emui Huawei Magic Ui
NVD
CVSS 3.1
9.8
EPSS
0.7%
CVE-2021-36989 Oct 28, 13:15 CRITICAL Act Now

There is a Kernel crash vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Emui Huawei Magic Ui
NVD
CVSS 3.1
9.8
EPSS
0.7%
CVE-2021-36986 Oct 28, 13:15 CRITICAL Act Now

There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Emui Huawei Magic Ui
NVD
CVSS 3.1
9.8
EPSS
0.7%
CVE-2021-22474 Oct 28, 13:15 CRITICAL Act Now

There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Emui Huawei Magic Ui
NVD
CVSS 3.1
9.8
EPSS
0.7%
CVE-2021-22403 Oct 28, 13:15 CRITICAL Act Now

There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Emui Huawei Magic Ui
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2021-22436 Oct 28, 13:15 CRITICAL Act Now

There is a Logic Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service integrity and availability. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Emui Huawei Magic Ui
NVD
CVSS 3.1
9.1
EPSS
0.7%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy