34214 matches found
Dell has uncovered vulnerabilities in container storage modules
Dell has addressed the vulnerabilities in Container Storage Modules version 1.18.0 and later. These vulnerabilities reside in Dell Container Storage Modules CSM, which are used for integrating Dell storage systems with container platforms such as Kubernetes and OpenShift. The identified...
CVE-2026-60093
CVE-2026-60093 — camel-azure-storage-datalake downloadToFile Pfad-Traversal Ausführbare Proof-of-Concept-Skripte zur Reproduktion derselben Apache-Camel-Schwachstelle, jeweils eines pro Laufzeitumgebung: Laufzeitumgebung| Verzeichnis| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Sprin...
CVE-2024-56428
CVE-2024-56428 Credenziali in chiaro nel database locale di iLabClient Leggere la configurazione inclusa la password iLabClient viene utilizzato per scaricare i risultati dal server di laboratorio. I dati di configurazione sono memorizzati localmente nell'istanza Apache Derby iLabClient. La...
CVE-2025-70962
CVE-2025-70962 Uso di credenziali hard-coded nel servizio RTSP della telecamera IP ZOSI C519M Campo| Valore ---|--- ID CVE| CVE-2025-70962 Vendor| ZOSI Technology Prodotto| Telecamera IP smart ZOSI C519M indicata anche come modello 1NC-519M Versioni interessate| Firmware V4.2.8.832C01450BA build...
Astra Linux – Vulnerability in Chromium
The Race in Storage feature in Google Chrome prior to version 150.0.7871.47 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: usb: udc: remove warning when queue disabled ep It is possible for the warning message to be triggered during the execution of the mass storage function. WARNING: CPU: 6, PID: 3839 Location: drivers/usb/gadget/udc/core.c:294...
Astra Linux – Vulnerability in Python-Django
In Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1, directory traversal is allowed if the filenames are passed to it directly...
Astra Linux – Vulnerability in git-lfs
Git LFS is an extension of Git for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host’s URL to the git-credential1 command without checking for embedded line-ending control characters. It then sends any credentials it receives back...
Astra Linux – Vulnerability in Rails
Active Storage allows users to attach cloud and local files in Rails applications. Before versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage’s DiskServicedeleteprefixed method passed blob keys directly to Dir.glob, without escaping the glob metacharacters. If a blob key contains...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Do not call scsiRemoveHost in pm8001Alloc. Calling scsiRemoveHost before scsiAddHost results in a crash. BUG: Kernel NULL pointer dereferencing, address: 0000000000000108 RIP: 0010: devicedel+0x63/0x440 Call Trace:...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed out-of-bounds access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can occur through tail calls. This occurs when two programs each utilize a cgroup local storage with...
Astra Linux – Vulnerability in libvirt
A NULL pointer dereference was detected in the libvirt API, which was introduced in the upstream version 3.10.0 and fixed in libvirt 6.0.0. This issue relates to the retrieval of a storage pool based on its target path. More specifically, this flaw affects storage pools created without a target...
Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232
Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232...
CVE-2026-66907
CVE-2026-66907 — camel-google-storage downloadFileName path traversal Proof-of-concept eseguibili per la stessa vulnerabilità Apache Camel, uno per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-google-storage 4.18.2 Camel Quarkus|...
CVE-2026-6815
CVE-2026-6815 PoC/Exploit: Casdoor 3.54.1 Path Traversal e Scrittura Arbitraria di File Autenticato Questo repository contiene un exploit Proof of Concept PoC per CVE-2026-6815, una vulnerabilità di scrittura arbitraria di file e path traversal in Casdoor. La vulnerabilità è stata risolta nella...
CVE-2024-37010
CVE-2024-37010 Exploit per CVE-2024-37010: accesso allo storage esterno di altri utenti e movimento laterale: https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-0753/ https://owncloud.com/security-advisories/insecure-direct-object-reference-in-external-storage Introduzione Owncloud trasforma un...
PT-2026-106192
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...
EUVD-2026-92786
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...
CVE-2026-78860
The Mercusys AC12 V2 is affected by a vulnerability that allows a local attacker to achieve arbitrary code execution . The root cause is identified as the storage of information in plaintext , which is associated with CWE-311 (Missing Encryption of Sensitive Data) and CWE-347 (Improper Verificati...
