# Vulnerabilities

> Advisories with CVSS scoring and affected and patched versions.

- **URL:** https://hackindex.io/vulnerabilities

- [CVE-2026-44262 - dedoc/scramble Unauthenticated RCE](https://hackindex.io/vulnerabilities/CVE-2026-44262.md): CVE-2026-44262, CVSS 9.4
- [CVE-2026-2991 KiviCare authentication bypass](https://hackindex.io/vulnerabilities/CVE-2026-2991.md): CVE-2026-2991, CVSS 9.8
- [CVE-2026-3891 - Pix for WooCommerce Unauthenticated File Upload](https://hackindex.io/vulnerabilities/CVE-2026-3891.md): CVE-2026-3891, CVSS 9.8
- [CVE-2025-66398 - SignalK Server RCE](https://hackindex.io/vulnerabilities/CVE-2025-66398.md): CVE-2025-66398, CVSS 9.7
- [CVE-2024-56348 - JetBrains TeamCity Authentication Bypass + RCE](https://hackindex.io/vulnerabilities/CVE-2024-56348.md): CVE-2024-56348, CVSS 4.3
- [CVE-2020-11651 - SaltStack Salt RCE](https://hackindex.io/vulnerabilities/CVE-2020-11651.md): CVE-2020-11651, CVSS 9.8
- [CVE-2019-9978 - Social Warfare RCE](https://hackindex.io/vulnerabilities/CVE-2019-9978.md): CVE-2019-9978, CVSS 6.1
- [CVE-2019-5029 - Exhibitor RCE](https://hackindex.io/vulnerabilities/CVE-2019-5029.md): CVE-2019-5029, CVSS 9.8
- [CVE-2019-15949 - Nagios XI RCE](https://hackindex.io/vulnerabilities/CVE-2019-15949.md): CVE-2019-15949, CVSS 8.8
- [CVE-2021-22204 - ExifTool DjVu RCE](https://hackindex.io/vulnerabilities/CVE-2021-22204.md): CVE-2021-22204, CVSS 6.8
- [CVE-2021-21425 - GravCMS RCE](https://hackindex.io/vulnerabilities/CVE-2021-21425.md): CVE-2021-21425, CVSS 9.3
- [CVE-2025-69985 - FUXA Unauthenticated RCE](https://hackindex.io/vulnerabilities/CVE-2025-69985.md): CVE-2025-69985, CVSS 9.8
- [CVE-2026-25643 - Frigate RCE](https://hackindex.io/vulnerabilities/CVE-2026-25643.md): CVE-2026-25643, CVSS 9.1
- [CVE-2025-4517 - Python Tar](https://hackindex.io/vulnerabilities/CVE-2025-4517.md): CVE-2025-4517, CVSS 9.4
- [CVE-2025-6019 - libblockdev / udisks2 / Polkit](https://hackindex.io/vulnerabilities/CVE-2025-6019.md): CVE-2025-6019, CVSS 7
- [CVE-2025-6018 - pam-config](https://hackindex.io/vulnerabilities/CVE-2025-6018.md): CVE-2025-6018, CVSS 7.8
- [CVE-2025-49132 - Pterodactyl](https://hackindex.io/vulnerabilities/CVE-2025-49132.md): CVE-2025-49132, CVSS 10
- [CVE-2023-43208 - Mirth Connect RCE](https://hackindex.io/vulnerabilities/CVE-2023-43208.md): CVE-2023-43208, CVSS 9.8
- [CVE-2023-0386 - Linux kernel OverlayFS (Privilege Escalation)](https://hackindex.io/vulnerabilities/CVE-2023-0386.md): CVE-2023-0386, CVSS 7.8
- [CVE-2025-32433 - Erlang RCE](https://hackindex.io/vulnerabilities/CVE-2025-32433.md): CVE-2025-32433, CVSS 10
- [CVE-2025-54309 - CrushFTP](https://hackindex.io/vulnerabilities/CVE-2025-54309.md): CVE-2025-54309, CVSS 9,8
- [CVE-2025-24367 - Cacti RCE](https://hackindex.io/vulnerabilities/CVE-2025-24367.md): CVE-2025-24367, CVSS 8.7
- [CVE-2025-2304 - Camaleon CMS (Create Admin User)](https://hackindex.io/vulnerabilities/CVE-2025-2304.md): CVE-2025-2304, CVSS 9.4
- [CVE-2024-46987 - Camaleon CMS (Path Traversal)](https://hackindex.io/vulnerabilities/CVE-2024-46987.md): CVE-2024-46987, CVSS 6.5
- [CVE-2025-32462 - Sudoers Host Escape](https://hackindex.io/vulnerabilities/CVE-2025-32462.md): CVE-2025-32462, CVSS 8,8
- [CVE-2025-24893 - XWiki RCE](https://hackindex.io/vulnerabilities/CVE-2025-24893.md): CVE-2025-24893, CVSS 9.8
- [CVE-2024-32019 - Netdata ndsudo](https://hackindex.io/vulnerabilities/CVE-2024-32019.md): CVE-2024-32019, CVSS 8.8
- [CVE-2025-66478 - React2Shell](https://hackindex.io/vulnerabilities/CVE-2025-66478.md): CVE-2025-66478, CVSS 10
- [CVE-2025-55182 - React2Shell](https://hackindex.io/vulnerabilities/CVE-2025-55182.md): CVE-2025-55182, CVSS 10
- [CVE-2025-54068 - Livewire RCE](https://hackindex.io/vulnerabilities/CVE-2025-54068.md): CVE-2025-54068, CVSS 9.2
- [CVE-2021-3129 - Laravel Ignition RCE](https://hackindex.io/vulnerabilities/CVE-2021-3129.md): CVE-2021-3129, CVSS 9.8