CWE-74

CWE-74 · 11 records · 8 with a public proof-of-concept

Records the NVD classes under CWE-74, highest CVSS first.

  1. HIGH 8.8CVE-2026-18787public PoC2026-08-04

    A vulnerability was identified in GL.iNet AX1800 up to 4.8.3. The affected element is the function remove_rule of the file /usr/share/gl-ngx/oui-rpc.lua of the component RPC Endpoint. The manipulation of the argument args.id leads to command injection. The att…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 7.3CVE-2026-188592026-08-05

    A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit…

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 7.3CVE-2026-188542026-08-05

    A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10. The impacted element is the function GetStoredClassByFilter of the file /Base/BaseService.asmx/DataService. The manipulation of the argument FilterString leads t…

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 7.3CVE-2026-187702026-08-04

    A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation o…

    AI risk analysis on Exploit-DB.ai →

  5. HIGH 7.2CVE-2026-18902public PoC2026-08-05

    A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerability is the function esps.wan.repeater.set/repeaterproc of the file /api/esps. Performing a manipulation of the argument my2P4key results in command injection. Remote exploitation of …

    AI risk analysis on Exploit-DB.ai →

  6. HIGH 7.2CVE-2026-18814public PoC2026-08-04

    A vulnerability was found in H3C NX15 V100R017. This impacts the function reload.reload_config of the file /api/esps. The manipulation results in command injection. The attack can be launched remotely. The exploit has been made public and could be used. The ve…

    AI risk analysis on Exploit-DB.ai →

  7. HIGH 7.2CVE-2026-18813public PoC2026-08-04

    A vulnerability has been found in H3C NX15 V100R017. This affects the function delete of the file /api/esps. The manipulation of the argument esps.apcm.version leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to …

    AI risk analysis on Exploit-DB.ai →

  8. HIGH 7.2CVE-2026-18812public PoC2026-08-04

    A flaw has been found in H3C NX15 V100R017. The impacted element is the function esps.ipv6.wan of the file /api/esps. Executing a manipulation of the argument workMode can lead to command injection. It is possible to launch the attack remotely. The exploit has…

    AI risk analysis on Exploit-DB.ai →

  9. HIGH 7.2CVE-2026-18811public PoC2026-08-04

    A vulnerability was detected in H3C NX15 V100R017. The affected element is the function Add of the file /api/esps. Performing a manipulation of the argument esps.filter.url results in command injection. It is possible to initiate the attack remotely. The explo…

    AI risk analysis on Exploit-DB.ai →

  10. MEDIUM 6.3CVE-2026-18896public PoC2026-08-05

    A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.php. Executing a manipulation of the argument oldpass can lead to sql injection. It is possible to lau…

    AI risk analysis on Exploit-DB.ai →

  11. MEDIUM 6.3CVE-2026-18766public PoC2026-08-04

    A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing of the file /Applications/MAMP/htdocs/core-php-admin-panel-master/customers.php. Executing a manipulation of the a…

    AI risk analysis on Exploit-DB.ai →