Skip to main content
CVE-2023-26602 Feb 26, 20:15 CRITICAL POC THREAT Act Now

ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for NET-SNMP-EXTEND-MIB with /bin/sh for. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Command Injection Asmb8 Ikvm Firmware Asus
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
17.4%
CVE-2023-1038 Feb 26, 12:15 CRITICAL POC Act Now

A vulnerability classified as critical has been found in SourceCodester Online Reviewer Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Reviewer Management System Online Reviewer Management System Project
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.8%
CVE-2023-1037 Feb 26, 12:15 CRITICAL POC Act Now

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Dental Clinic Appointment Reservation System Dental Clinic Appointment Reservation System Project
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2023-1040 Feb 26, 12:15 CRITICAL Act Now

A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Online Graduate Tracer System Online Graduate Tracer System Project
NVD VulDB
CVSS 3.1
9.8
EPSS
0.6%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy