58 matches found
CVE-2025-13780
CVE-2025-13780: Escáner RCE para pgAdmin 4 = 8.14 Un escáner de vulnerabilidades integral para CVE-2025-13780 , una vulnerabilidad de ejecución remota de código RCE en pgAdmin 4 versiones ≤ 8.14. 🔍 Detalles de la vulnerabilidad La vulnerabilidad existe en la función Restore de pgAdmin 4. La...
CVE-2026-82264
Duplicacy through 3.2.5 contains a path traversal vulnerability in the restore function that fails to validate entry paths deserialized from snapshot files. Attackers can craft malicious snapshot entries with directory traversal sequences to write files outside the restore directory to arbitrary...
EUVD-2026-67795
Duplicacy through 3.2.5 contains a path traversal vulnerability in the restore function that fails to validate entry paths deserialized from snapshot files. Attackers can craft malicious snapshot entries with directory traversal sequences to write files outside the restore directory to arbitrary...
CVE-2026-82264 Duplicacy Path Traversal during Restore via Unsanitized Snapshot Paths
Duplicacy through 3.2.5 contains a path traversal vulnerability in the restore function that fails to validate entry paths deserialized from snapshot files. Attackers can craft malicious snapshot entries with directory traversal sequences to write files outside the restore directory to arbitrary...
CVE-2026-82264
Duplicacy through 3.2.5 is affected by a path traversal vulnerability in its restore function. The root cause is a failure to validate entry paths deserialized from snapshot files, allowing an attacker to craft malicious snapshot entries containing directory traversal sequences that write files o...
CVE-2026-82264 Duplicacy Path Traversal during Restore via Unsanitized Snapshot Paths
Duplicacy through 3.2.5 contains a path traversal vulnerability in the restore function that fails to validate entry paths deserialized from snapshot files. Attackers can craft malicious snapshot entries with directory traversal sequences to write files outside the restore directory to arbitrary...
CVE-2026-73234
Affected: FreeCAD prior to 1.1.2. Vulnerability: PropertyFileIncluded::Restore() in src/App/PropertyFile.cpp concatenates an attacker-controlled file or data attribute from Document.xml with the document transient path without rejecting directory components, absolute paths, or parent traversal. I...
CVE-2026-58413
CVE-2026-58413 affects Network-AI (TypeScript/Node.js) where, before v5.12.2, EnvironmentManager.restore(env, backupId) builds a backup path with join(envDir, '.backups', backupId) and only checks that this path exists. This allowed path traversal like ../../../outside/source-dir to copy files fr...
CVE-2025-32957
baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is then automatically extracted. A PHP file inside the archive is included using requireonce without validating or restricting the filename. An attacke...
GHSA-HV78-CWP4-8R7R baserCMS has Unsafe File Upload Leading to Remote Code Execution (RCE)
Details The application's restore function allows users to upload a .zip file, which is then automatically extracted. A PHP file inside the archive is included using requireonce without validating or restricting the filename. An attacker can craft a malicious PHP file within the zip and achieve...
EUVD-2025-209130
baserCMS has Unsafe File Upload Leading to Remote Code Execution RCE...
CVE-2025-32957
baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is then automatically extracted. A PHP file inside the archive is included using requireonce without validating or restricting the filename. An attacke...
CVE-2025-32957 baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE)
baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is then automatically extracted. A PHP file inside the archive is included using requireonce without validating or restricting the filename. An attacke...
CVE-2025-32957
baserCMS prior to version 5.2.3 is vulnerable in its restore function, which accepts a ZIP upload and auto-extracts it. A PHP file inside the archive is then included via require_once without validating or restricting the filename, enabling arbitrary code execution if a malicious PHP file is craf...
CVE-2025-32957 baserCMS: unsafe File Upload Leading to Remote Code Execution (RCE)
baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is then automatically extracted. A PHP file inside the archive is included using requireonce without validating or restricting the filename. An attacke...
CVE-2025-32957
baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is then automatically extracted. A PHP file inside the archive is included using requireonce without validating or restricting the filename. An attacke...
The vulnerability of the amdgpu_userq_restore_worker() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c driver of the Direct Rendering Infrastructure (DRI) module for AMD GPU cores in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the amdgpuuserqrestoreworker function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserq.c driver of the Direct Rendering Infrastructure DRI module for AMD GPU cores in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this...
PT-2025-47662
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh crm restore data function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, wi...