4299 matches found
CVE-2026-72677 Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources
Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...
CVE-2026-72677 Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources
Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...
EUVD-2026-58264
Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...
CVE-2026-72677
Kibana Fleet is affected by a Relative Path Traversal (CWE-23) that can enable unauthorized deletion of Kibana resources. The issue arises from accepting a user-supplied Fleet Server host configuration identifier without rejecting relative traversal sequences; the identifier is stored as provided...
Kibana 8.19.17, 9.3.6, 9.4.3 Security Update (ESA-2026-94)
Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources Description: Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied...
PT-2026-71787
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Kibana Fleet allows a user-supplied identifier for a Fleet Server host configuration to be accepted without rejecting relative traversal sequences. This identifier is stored and subsequently...
Exploit for CVE-2026-18907
CVE-2026-18907 — Path Traversal in TECNO Hi Browser Download H...
CVE-2026-16263
creationtimestamp| type| source ---|---|--- 2026-08-08 15:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msldkoyjfy2u...
CVE-2026-67300
creationtimestamp| type| source ---|---|--- 2026-08-01 23:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2l56spgn2z...
JLSEC-2026-1016 ImageMagick: Stack overflow in fx operation
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-23, due to a missing depth check a stack overflow can occur in the fx operation by passing a crafted argument. This issue has been patched in version 7.1.2-23...
JLSEC-2026-1021 ImageMagick: Heap Buffer Over-Read in distributed pixel cache server
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-read in the server process. This issue has been patched in versio...
JLSEC-2026-1012 ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple images with different dimensions an out of bounds heap write can occur. This issue has been patched in versions 6.9.13-48 and 7.1.2-23...
CVE-2026-14512
creationtimestamp| type| source ---|---|--- 2026-07-28 23:03:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqjg6eoce2s 2026-07-28 23:48:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlwad67k2a 2026-07-30 05:15:07+00:00| seen|...
CVE-2024-58355
creationtimestamp| type| source ---|---|--- 2026-07-23 22:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrduoauc662j 2026-07-24 03:34:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mreg7wzkeu2g...
CVE-2026-25800
creationtimestamp| type| source ---|---|--- 2026-07-23 22:17:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrdujlesmg23...
CVE-2026-49035
creationtimestamp| type| source ---|---|--- 2026-07-23 22:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdtlrt3us2w 2026-07-23 22:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrduveaath23...
CVE-2024-3501
creationtimestamp| type| source ---|---|--- 2026-07-23 21:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrdsbeucjl23...
CVE-2026-15981
creationtimestamp| type| source ---|---|--- 2026-07-23 21:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdrcxw2hw2y 2026-07-26 10:01:16+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrk4rv32bq2i 2026-07-26 15:00:28+00:00| seen|...
CVE-2026-47724
creationtimestamp| type| source ---|---|--- 2026-07-23 20:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdq3lhsox2k 2026-07-23 22:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdtlla4y72g...